last executing test programs: 6.937250221s ago: executing program 1 (id=1381): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty, 0x1}, 0x1c) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x100) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={r1, 0x61c00000, {0x0, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x1e, 0x11, "608ae5dd933f24e0b60e57e51834194667fa6e5b5a52a78639193bf3256823b902f64bb7a42f934bbfae488f0169f3f6838f8ff1d6e4d16877fcdc5fb0f9060a", "a94f18b227cd6f9ade6d9608b2bf96bb1793279d4cad6678fbe6d95debc3a0462d821a7830112ebc2b2d0d9d2270ffe3ac31b86cdcfd02bb0306404986bef3df", "7e9808a00b2779d17810f3f1053cb5efac66a5cdf2bd2e9422a62560efbf405a", [0x62b, 0x3]}}) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00400072088b6be76e9049ff5739104afb61d9aa", 0x39}], 0x1) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYRESDEC=r3, @ANYRES8, @ANYRESOCT=r0, @ANYBLOB="35b353ab3d8ada5c1f58a7610dd109536e1e1171d1422c849d18ceaeeafe51337fac68e5"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 6.840576134s ago: executing program 1 (id=1383): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000380)={0x40, 0xc}, 0x0, 0x0}) (async) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r1, 0x4606, &(0x7f0000000040)={0x356, 0xa0, 0x780, 0x600, 0x0, 0x4, 0x0, 0xfffffffe, {0x9, 0x7}, {0x27, 0x0, 0x1}, {0x401, 0x7}, {0x1, 0x4, 0x1}, 0x3, 0x0, 0xe512, 0xff, 0x1, 0x6e, 0x10, 0x2, 0x803, 0x80, 0x8fac, 0x8, 0x8, 0x100, 0x0, 0x6}) (async) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) (async) r3 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000000)={0x0, r3}) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000180)) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) r5 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0) preadv(r5, &(0x7f0000003200)=[{&(0x7f0000002100)=""/4095, 0xfff}], 0x1, 0xffffffff, 0x0) (async) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, 0x0, 0x0) (async) syz_usb_control_io(r4, 0x0, 0x0) (async) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) (async) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, &(0x7f0000000100)=ANY=[@ANYBLOB="000e0100000006c30962fb81894e2c40e71d732fbdf41312fabc88023d8b1fc38d8b8579e6c3333482d0b1bcdccf71369657519430eb9544af1352b1d5342ceaa0b12d402dcb7189c16b82d5ff1e88f7f0cdf57aa36d375162760f73d8bacf79dd1bb29ca66501de"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x41) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) 5.326849024s ago: executing program 1 (id=1397): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket(0x10, 0x803, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r1, &(0x7f0000000500)={&(0x7f00000000c0)=@ax25={{0x3, @bcast}, [@remote, @rose, @bcast, @remote, @bcast, @rose, @remote, @null]}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/203, 0xcb}, {&(0x7f0000000240)=""/200, 0xc8}, {&(0x7f0000000340)=""/96, 0x60}], 0x3, &(0x7f0000000400)=""/252, 0xfc}, 0x2041) io_setup(0x4, &(0x7f0000000080)=0x0) io_submit(r3, 0x1, &(0x7f00000009c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x400, r2, 0x0, 0x0, 0x6, 0x0, 0x2}]) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fe07124081173809499b0102030109022400010000000009040000028b8647000905e8ff000900000009050a", @ANYRES16=r1], 0x0) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fe07124081173809499b0102030109022400010000000009040000028b8647000905e8ff000900000009050a", @ANYRES16=r1], 0x0) ioctl(r0, 0x8b32, &(0x7f0000000040)) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[], 0x0) (async) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[], 0x0) 4.871095136s ago: executing program 1 (id=1400): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000040)={0x0, 0x1}, 0x0) setresuid(0xee01, 0x0, 0x0) setreuid(0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030003000000008000000000000805000100070000000900020073797a30000000001400078008001240001500000500150000100000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)={0x20, 0x13, 0x1, 0x2, 0x25dfdbf6, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}, @typed={0x8, 0xf7, 0x0, 0x0, @fd}]}, 0x20}], 0x1}, 0x4004050) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r5, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x121484b, &(0x7f00000002c0)=ANY=[]) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYRESDEC=r1], 0x34}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) 4.341928889s ago: executing program 1 (id=1407): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x20000000000000}) fcntl$lock(r0, 0x26, &(0x7f0000000300)={0x1, 0x0, 0x2005, 0x1fd}) fcntl$lock(r0, 0x26, &(0x7f0000000280)={0x1, 0x2, 0x2b, 0x9}) ioctl$TIOCNOTTY(r0, 0x5422) fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x20000000000001, 0x90}) openat(0xffffffffffffff9c, 0x0, 0x80042, 0x1bd) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) pwrite64(r1, &(0x7f0000000400), 0xca800, 0x9a) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x2, 0x3f, &(0x7f00000000c0)=ANY=[], 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {0x4, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x48}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=@migrate={0xec, 0x21, 0x1, 0x0, 0x4, {{@in6=@private1, @in6=@dev={0xfe, 0x80, '\x00', 0x8}, 0x0, 0x5, 0x4e22, 0x0, 0xa}}, [@migrate={0x9c, 0x11, [{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@empty, @in6=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0xbf364f25cac721d0, 0x0, 0x0, 0x3505, 0xa, 0xa}, {@in6=@empty, @in=@dev={0xac, 0x14, 0x14, 0x1e}, @in=@broadcast, @in6=@dev={0xfe, 0x80, '\x00', 0x19}, 0x2b, 0x1, 0x0, 0x3503, 0x2, 0x2}]}]}, 0xec}}, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$kcm(0x29, 0x7, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000040020000090a010400000000000000000700000008000a40000000020900020073797a30000000000900010073797a3000000000080005400000000c0c0009800800014000000910080003400000011008000c40000000e7"], 0x288}}, 0x20050800) 4.275421929s ago: executing program 0 (id=1409): write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000300)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x7, '\x00', "1da01af0cc7c11aa04d6b81f39d72b45121b5cdd2166a058ee51b59038b6d1abea0dfcdfc078a9e575d29c2ed3d6187d944b4f207e2240862d21247c8e926f512e19d81757d381cac7aa54b6513ffe5e63bcd649bebc869db7af5659474b173a01f9f5ad61488c86a40f03e30307d976f48fcd902e529b019365195e63eeb5cbd00155ee18b4812885ac9594858cbfa48e05c1bba9107f851cb0649db8e63ff519a578ebc9a3c4082d3267bc756c1d0f09a48739e2045713d95458c53eb6cf2bd43652eef63a072cbe3e69b5f30b088b85fa8c2a9c5b99c2f801d7a510cc7bc2986bded68b1b84312afa13b9afe26ea5caebc817935f9d00"}}, 0x110) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="c0400001", @ANYRES16=0x0, @ANYBLOB="000000000000000000001b000000200022801c000080080002000000000008000400000000000800050000000000050092000000000007002100616100007c00228034000080080003000000000008000500000000000800020000000000080003000000000008000200000000000800040000000000440000800800040000000000080007000000000008000600000000000800050000000000080001000000000008000200000000000800030000000000080007"], 0xc0}}, 0x4001) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180), 0xfefc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r0, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000002000/0x3000)=nil, &(0x7f0000000000/0xe000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f0000008000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000008000/0x3000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000008000/0x1000)=nil, &(0x7f000000c000/0x2000)=nil, 0x0}, 0x68) (async) syz_usb_connect$uac2(0x5, 0x93, &(0x7f0000000200)=ANY=[@ANYBLOB="120100030000004082058d00400001020301090281000301007007080b0101010520020904"], &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0}) 3.669289394s ago: executing program 0 (id=1413): r0 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848340000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x2000489c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000141200006c07010033d43afffe800000000000000000000000000010ff02000000000000000000000000000189"], 0x340a) write$tun(r1, &(0x7f0000000080)={@val={0x0, 0x8035}, @void, @x25={0x2, 0x0, 0xf3, "0e7a9a9ef513db9d7fbb54600ce32be5c8df5188af0496e20e2c58036325523c2239ba0ef8a3bbf57843bc6ae85b6dc96220a464afc19cfb678e6d8fd2e2871120d86c2e12481afb62ab44dc562ddc5941665e3859a69596cd0beb1a1723e15ad94c427320509a8981947ee817e5d1e5759e7d85c6f14bd8044082ea0a6f8eb086177117a02cfaa90fc0a2919273d437aacb145e3586926097e1ab332f66880fbb89956e64cd0b4b0acd531a0bf6df4372355fcab7beb10aea074edbda231ec50196f6dafa76e55ab4608e603f6d9ca4dcb3cee9f46853f6f1ade72254e4b6352a5977f43db1e231dd997f"}}, 0xf2) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, &(0x7f0000000040)=0x7000) (async) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, &(0x7f0000000040)=0x7000) 3.245193099s ago: executing program 0 (id=1420): ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e24, 0xfffffffe, @loopback, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000340), 0x3) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000480)="1c0000001a009b8a140000003b00"/28, 0x1c) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x24004000}, 0x40800) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000000)={0x2c, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000200)=@gcm_256={{0x304}, "b5d4c27c5c778dd0", "5f128fd81908609c81286d4f6a539024ffb7007ed672afb4be7aec5ca3d27dbf", '\x00\x00\b\x00', "b690a3fabf2cb970"}, 0x38) write$binfmt_script(r1, &(0x7f00000003c0), 0x4) recvmmsg(r1, 0x0, 0x0, 0x40000002, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000380)="ac", 0x1}], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x200040c4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x20, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000080)={0x0, 0xffffffffffffff20, 0x0, 0x0, 0xffffffffffffffff, 0x100}, 0x2040) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, 0x0, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f00000002c0)={0x1, r4}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) 1.987921632s ago: executing program 3 (id=1429): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) write(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) inotify_init() ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000180)={"2486910284ed923431d4c5d5fbf514fd00", r2}) 1.879990068s ago: executing program 3 (id=1430): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x4, 0x204000) ioctl$SNDRV_PCM_IOCTL_DELAY(r1, 0x80084121, &(0x7f0000000040)) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="48000000140081fb7059ae08060c040002ff0f03f1cd823010a7ce9000000000000ec000006fabca3b4e7d06a6bd7c00000000030000068a562ad6e74703c48f93bc2a0200000046", 0x48}, {&(0x7f0000000080)}], 0x2}, 0x4000000) 1.793718278s ago: executing program 3 (id=1431): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="440100001000130722bd70000000000000000000000000000000ffffe0000002ac1414130000000000000000000000004e22000100000003020000003a000000", @ANYRES32=0x0, @ANYRESHEX=r0, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000fe8000000000000000000000000000aa0000000000000000000000000000000008000000000000000a000000000000000600000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000200000000000000f8ffffffffffffff0c000000000000000200000029bd70000000000002000500ac000000000000004c001200726663343534332867636d286165732929000000000000000000000000000000000000000000000000000000000000000000000000e8000000000000000000000000000080000000080028"], 0x144}, 0x1, 0x0, 0x0, 0xc0}, 0x0) add_key$keyring(&(0x7f0000000240), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r1 = openat$zero(0xffffffffffffff9c, &(0x7f000000c540), 0xc00, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, 0x1411, 0x400, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 1.732955864s ago: executing program 0 (id=1432): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106161154d00000000000109022400010000000009040000010300000009210000000122f80409058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$hid(r0, 0x0, 0x0) (rerun: 64) syz_usb_control_io$hid(r0, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$hid(r0, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io(r0, &(0x7f00000001c0)={0x18, &(0x7f0000000000)={0x0, 0x5, 0x2, {0x2, 0x21}}, 0x0, 0x0, 0x0, 0x0}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000180)={0x2020}, 0x2020) 1.721253431s ago: executing program 3 (id=1433): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) add_key$fscrypt_provisioning(&(0x7f00000002c0), 0x0, &(0x7f0000000340)=ANY=[], 0x48, 0xfffffffffffffffe) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000008000a40000000060a0b160000000000000000020000081c00048010000180080001006f736600040002800900010073797a30000000000900020073797a3a00000000140000001100010000000000000000000000000a"], 0x68}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) bind$alg(r1, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r7 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r7, &(0x7f0000000080)={0x1d, r6, 0x0, {0x0, 0x0, 0x4}, 0xfd}, 0x18) sendmsg$can_j1939(r7, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) write$cgroup_devices(r4, 0x0, 0x9) write$cgroup_devices(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB='b 75:*\trr'], 0xa) r8 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="ff8d9ca38fff48f3be9d5216344c", 0xe}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1", 0x22}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg$can_bcm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000100)=""/3, 0x3}, {&(0x7f0000000680)=""/112, 0xfffffef2}], 0x2}, 0x10150) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x100, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000400)=[{0x50, 0x1, 0x5, 0x80000000}, {0x2, 0x80, 0xfd, 0xfffffff8}, {0x5, 0x5, 0xa8, 0x1ff}]}, 0x10) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) r9 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x490040, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r9, 0xc01064c8, &(0x7f00000003c0)={0x2, 0x0, &(0x7f00000002c0)=[0x0, 0x0]}) ioctl$MEMWRITEOOB(r0, 0xc0104d03, &(0x7f00000001c0)={0x4, 0x12, &(0x7f0000000080)="8afb29c53dcf66bdedcd5c1caf2e8a401193"}) 1.27701221s ago: executing program 1 (id=1439): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e", 0x30}], 0x1, 0x0, 0x0, 0x40800}], 0x1, 0x48040) openat$ublk_ctrl(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) msgsnd(0x0, 0x0, 0x8, 0x0) msgsnd(0x0, 0x0, 0x0, 0x800) msgrcv(0x0, 0x0, 0x0, 0x3, 0x1c00) ioctl$SNDCTL_SYNTH_INFO(r0, 0xc08c5102, &(0x7f00000000c0)={"bcd4a5c02bbce0dff832ad4e3992feefb1f9db7e7250a0c8a48f50b7dd9a", 0x9, 0x2, 0x1, 0x7, 0x100, 0x9, 0xf7e, 0x5, [0x7f, 0x6, 0x2, 0xf9, 0x7ff, 0x80, 0x80000001, 0x1, 0x7, 0x1ff, 0x10001, 0x6, 0x1, 0x9, 0xa, 0x1, 0x2, 0xff, 0x6]}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) syz_usb_connect(0x5, 0x36, &(0x7f0000000740)=ANY=[@ANYBLOB="120150027ad07c4024042c01d72e0102030109022400010381909809045c01025b4e190e090503023004fc00010905"], &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0}) 1.066245128s ago: executing program 0 (id=1442): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae03, 0xdc) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x103903) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) (async) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101402, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101402, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r3) (async) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1800000076000100030000520000000008000010"], 0x18}], 0x1}, 0x0) (async) sendmsg$netlink(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1800000076000100030000520000000008000010"], 0x18}], 0x1}, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000200)="2e1221b23bb601c477d3df163e75963d0806", 0x12}], 0x1) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) 901.508375ms ago: executing program 2 (id=1443): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r1, &(0x7f00000005c0)={&(0x7f00000008c0)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000600)=[{&(0x7f00000001c0)="0800b1e688b8867d", 0x8}, {&(0x7f00000002c0)="76a35a26c5ec835015eec2e0c4e7cb1928914bead6ac3a5031e6ba4bd32753da5120cfedd059a229e0c63b5216b95a805dc119abaa11c70caf2b46d543e5a0349b82534e8f3c92", 0x47}, {&(0x7f00000003c0)="741088ee31f6ec521d6f2ab0f02adea00deb16bfc3e54e4cb49e8d95417060c74d562ea9ae1c7e5950b263b0ac91064e00e01ec9a55d34182909e4ab7adf6a539d6c3ace267021f64a1de92680dbdcfeab18690ecc98a72dba8d795a5e71db9a0836c330d494318f71da5771975e3d8b0cabc156b2c789eaef8efb42a1d028fa4c88dac31223e19e3b97b4725aee807e749abe4b2fc6a373eeba3fb8354cd0dd981531cfc8f29a2871116f20e47661598a726e1072f44714e0a3f922a335ea53a0aa09d91b4ddd4ca9ef8671c938efbc71", 0xd1}, {&(0x7f00000004c0)}, {&(0x7f00000007c0)="9778450e0f7e62bbdfc4fe0254a7d67cfb3131044d788ec0d0a3da5eb45acc6e119577b9bd892f5817f9fda4b0dc778f34493e6aeaa03a9aeda6acc1553335bd3ec8db120d0e322f9dbf8face05aceea4a1b56ec790c93ba8b7bb814fae895fb92e81864bb6b983364eb14910450a912", 0x70}, {&(0x7f0000000680)="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", 0x112}], 0x6, &(0x7f0000000100)=[@ip_ttl={{0x14, 0x0, 0x34, 0x6}}], 0x18}, 0x4044000) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) socket(0x10, 0x803, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x80) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, 0x0, 0x0) sendmsg$netlink(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="180000006a001f03"], 0x20}], 0x1, 0x0, 0x0, 0x2c0040d0}, 0x10) socketpair(0x1, 0x803, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', r3, 0x29, 0x0, 0xfe, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x30}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x0, 0x2}}) r7 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r7, 0xc0884123, &(0x7f0000000000)={0x2, "0dae10365f19f9dddacbbbbb0b924d1228a625186ac3ae0761bb609f0990708f75d25f43016d39746ac5dda722a9f33e30ee521894081a7df7ae8e860a8cc88f", {0x1, 0x6}}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYRES16=r0, @ANYBLOB="b46abdcc3fe7df148fc8b158bbeba15d9c13b0e68603b4a38f0d5d6808415ccab564dad4b557f0c59f64bde76ab55807cae608194b58d80f97486e6d07da86929cc2686fb4265105a65b034f82a1477e62853d777069eb73014c12425265d149bb24e8fcef1fc2a26ca678e457a21be04522e71fd50b405733d0b384a9da6e1d", @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_set$uid(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r8 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$UHID_INPUT(r9, &(0x7f0000000400)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f00000002c0)={r9, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 876.146299ms ago: executing program 2 (id=1444): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000200)) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0x1) dup2(r0, r0) (async) r1 = dup2(r0, r0) read$FUSE(r1, &(0x7f0000000440)={0x2020}, 0x2020) ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000040)=0x80) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) socket$xdp(0x2c, 0x3, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) syz_usb_connect$uac3(0x4, 0xf7, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000000008630731104000010203010902e500030111200f080b00030124300c0904000000010130000a2401074c00000800001d240a040202000000010000000200ba7200000000000003000000030000000b240d"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0xf4, &(0x7f0000000100)=@string={0xf4, 0x3, "9a1e61243f478664966ebd1411d844d17ef18aa97c7661f8f6fec4b3138f26ea7c460926f554b159c51291e8c0c80bf17cf2c5f38100f2f053c263e8d24188522e93a117edc21305a518f0892048cc6ddb8212b5cfee15de8d73c5c247640175903cd3a9f2c726a42059c1ab3a73b1df298d96495912cc5b7b52a2bd106da53622b65f2809366da5e69f872cfdf12ec7fa6dcbf6475e584304aa0e853c44cbf3d642c489a67d3e827d485c4f8ee5fc935b7d3d7856aa2ac6ba279ec0abbb65e717be88ed503aa592e9cb4f842f3e1f679ad76423c8a1a8fcd453abc8a4db53cf2848238ef5f57ab19711e2948ffadf1e566c"}}]}) 409.016046ms ago: executing program 0 (id=1445): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)=ANY=[@ANYBLOB="120100003a982a08cd0ca310a223010203010902120001000000000904"], 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="400a06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x76bc2947f62218d6, 0x2}}, 0x20) 357.167532ms ago: executing program 2 (id=1446): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xb4, 0x0, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8}, {0x6, 0x11, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xb720}, {0x6, 0x11, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x5}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) (async, rerun: 64) r1 = dup3(r0, r0, 0x0) (rerun: 64) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x3, 0x352ec5, 0x2de993}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48, 0x6, 0x0, 0x0, r2}) write$dsp(r1, &(0x7f0000000280)="087baefcdaf1db3cb3007e8b5e0baaa2794d167675781c5ed145bb4fdc85d5026ddaddb6336fe0bd3f7302cfccab26d195a17d88c220c0234619746db1e943a5d8a6ed3e9832d97da3801dcc47feec8c7e4a256836d37e5c28bdbdc5aa6c6bd1d2bf06d9b55742e5f01837dd642aa461a4f61a33cff7ce35c7b4ba", 0x7b) (async) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000300), 0x8801) (async, rerun: 32) r4 = socket$alg(0x26, 0x5, 0x0) (rerun: 32) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000340)={0x7}, 0x1) (async) ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, &(0x7f0000000600)={{'\x00', 0x2}, {}, 0xc, 0x0, 0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)="75936868f79e6aa765dbb735a2eb00cd8a639c83a625f5c5ff05f833306f1b6a29d15ddd1082e991e3cea791aaeba6bb08b14ce2ac825f96cb8e52c6334dfa9883683f7cbec6978e480f72d18505c61ade0f8337555604a8a501fbd9994e62d1345fb5592d53bc62a1a8950dc995562bfb6eb160d1b1", 0x76, 0x0, &(0x7f0000000480)={0x2, 0x143, {0x1, 0xc, 0xe1, "0ffe8aa200158da572ea106517129e59c93d3cac85ae76a72109d596ae84b87389c143e661adc448366efb0844b9b7fc6cfc474d22ca82b7025220923e63e916cad8d75dc8828b08ae20bb05025595581a89e7de3db20747c7dd6cd3311e4212fa90aae5f4b13c3f2aa102510e5aeb93f63f9f6dcd7c812d6b41a230fe6e85c7b8adcd21ae80fe6033efc4fbdfe6c568acca27c435fad1be76344a21d359a1b255fe3a0ab8ee0a471192ac95fbe247e3e85352139dae6f6b21cd2bc434bc183b9c806c5a904bcd4bcf102d955d6f8a598cafd0f1ce6d7aed97b8175c189502f96a", 0x55, "541d2c6aad5c4a1b5aff3a18a94ded02e75bbf5752eefdec8484d7a05cc8081087bc1aa7d22dc9d798b0804966c9bbb8ab5b4e2ea2b5ddd55ae0208e4c56a32e17e939aef43380147f3928d2cee9ff3a604432f280"}, 0x13, "f4d00ab29394b29f6b270a623e8586cefd4663"}, 0x162}) (async) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000680)='yeah', 0x4) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000700)={'veth0_to_hsr\x00', &(0x7f00000006c0)=@ethtool_modinfo={0x42, 0xfd, 0x5}}) (async) ioctl$IOMMU_VFIO_IOAS$GET(r3, 0x3b88, &(0x7f0000000740)={0xc, 0x0}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r1, 0x3b87, &(0x7f0000000780)={0x18, 0x1, 0x0, 0x0, r5}) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f00000007c0)=""/198, &(0x7f00000008c0)=0xc6) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000940), r1) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x48, r6, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x6}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x9c}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x200c4800}, 0x40) (async, rerun: 64) r7 = dup(r4) (rerun: 64) ioctl$SOUND_PCM_READ_CHANNELS(r1, 0x80045006, &(0x7f0000000a80)) (async) ioctl$DRM_IOCTL_AGP_ACQUIRE(r7, 0x6430) read$dsp(r1, &(0x7f0000000ac0)=""/193, 0xc1) (async) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r1, 0x3ba0, &(0x7f0000000bc0)={0x48, 0x6, r5}) socket$nl_xfrm(0x10, 0x3, 0x6) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000c40)={0x28, 0x4, r5, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x101}) (async) r8 = socket$inet_sctp(0x2, 0x1, 0x84) (async) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000c80)={0x0, 0x40}, &(0x7f0000000cc0)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r8, 0x84, 0x0, &(0x7f0000000d00)={r9, 0x1, 0xd, 0x9}, 0x10) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000d40)={0x9, 0x1, 0x3, {0x1, @raw_data="13402bc0615590b6aa1441f2b78492cc5460595e2bf5dc4ca361f24cb5008cec344280a6fbe8e4234fb645029a1653db17cbb582b4a3f1a76745157844511e0c6fdea00da2ea953a5f59f2d475d0404631540d8e64c6a4ae50a03e7acfab10d068c59f6a05ceeb4f1435255193bc0e0f34a38f586df04e43297f397406744431fa6658f4813e61b9087fd39777877fcf1cd48b48dbb068ecbfe0a541a0958b67eeeb49791dc6bbd54368deb1b0e70df1631e5bf8c887ffb85dd1e805bb6d8f2559dc041beb5afb65"}, 0x8c2f}) ioctl$VIDIOC_SUBDEV_S_SELECTION(r7, 0xc040563e, &(0x7f0000000e40)={0x1, 0x0, 0x2, 0x2, {0x401, 0x5, 0xfffff800, 0xd029}}) (async, rerun: 64) syz_emit_vhci(&(0x7f0000000e80)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) (rerun: 64) 179.05704ms ago: executing program 3 (id=1447): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) capset(&(0x7f0000000500)={0x20071026}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, 0x0) (async) r1 = creat(&(0x7f0000019080)='./file0\x00', 0xecf86c37d530494c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) (async) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x3) (async) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "dce02de9d7bd466b", "72e64b3892cb7025848c9f40363cf916", "cfff3c66", "e2b768b4bb9e0d9b"}, 0x28) (async) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x101180, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r3, 0xc0040d07, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000300)=[{&(0x7f0000000900)="580000001400192340834b80040d8c560a066e0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000007000200060c10000000010000000000", 0x58}], 0x1) (async) listen(0xffffffffffffffff, 0xa) socket$inet6(0x2d, 0x806, 0x0) openat$cgroup_type(r1, &(0x7f0000000000), 0x2, 0x0) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r5, 0x40000000af01, 0x0) (async) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/51, 0x0}) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007940)=ANY=[@ANYBLOB="2400000056000100000002006578743400000000"], 0x24}, 0x1, 0x0, 0x0, 0x8094}, 0x0) (async) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000340)) (async) r8 = dup(r7) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000000)={0x1, r8}) (async) syz_clone3(&(0x7f0000000040)={0x200200000, 0x0, 0x0, 0x0, {0x3e}, 0x0, 0xfffffffffffffe35, 0x0, 0x0}, 0x58) 104.710559ms ago: executing program 2 (id=1448): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="ad56b681f07ec5f3957cd492ea54c7be0000000000000000", 0x18) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x38280, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000080)=0x102) 13.665873ms ago: executing program 2 (id=1449): r0 = socket$nl_route(0x10, 0x3, 0x0) getrlimit(0x9, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904"], 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000400000001000000090000003c0003800800030000000000140002007663616e300000000000000000000000080001000100000014000600ff"], 0x50}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) syz_usb_disconnect(r2) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_IFINDEX(r5, 0x113, 0x2, 0x0, &(0x7f0000001880)) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x40481, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6000005, 0x4008032, 0xffffffffffffffff, 0x0) r7 = dup(r6) ioctl$PTP_EXTTS_REQUEST2(r7, 0x40043d14, &(0x7f0000000000)={0xfffffffe, 0xc}) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0x41d9fda7) ptrace$getsig(0x4202, r1, 0x96ba, &(0x7f0000000080)) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="7c0300001900100000000000ffffffff6903a78014003600fe8000000000000000000000000000bb01bc61de647000e59571c1a5579ca27b15f215ec06a3d7143fc2c4cfbcd5d9a76f37199e8472d4acb01e18f40329ba261a232165b6eff0f0c25ab4f51cba6dc418351a5209993f6a617f6e61b57bd22de16e5d291e1e334d180c051addbbbd847152c0973436d622dbfb3642600eb1847f1dba9942e31ffb8fd6ab3e46745c78c505b6ca23366cf8bc5e6216c92c0450ea1c2b91c42ecf2d792d0ee1d87ebedcdee33dbd650800b600", @ANYRES32=r1, @ANYBLOB="a402c7800800640005000000bd01cf8004002300040061806ea75aad4405192be9923dba40da725825470b59d5538504bc5ae7863a1c18be3746d0cb333a0fab5566f4565d6b1df9f2b1b63bd48e93ac97013aa1403effdbf38e4447333d450ddc2f9cadd3ed13dca3c6a66f4cec0a62d72e6456cebacba1c7547afaf3ff12ed5173b68669f417619644fe98787c63e5ef75556b5f00acd20e25a954437b37102de8b5d393fd5881d53ea7c99825473404e635611909c623c2696e3bce93b051dc2fbdf4928a550ccec0aad0e08a0800e100", @ANYRES32=0x0, @ANYBLOB="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"/465], 0x37c}], 0x1}, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r7, 0x5201) 3.138668ms ago: executing program 2 (id=1450): r0 = socket$inet_icmp(0x2, 0x2, 0x1) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x6}, 0x1c) sendto(r1, &(0x7f00000002c0)="aa", 0x1, 0x4004000, &(0x7f0000001400)=@in6={0xa, 0x4e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}, 0x80) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x50, 0x0, &(0x7f00000007c0)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100000, 0x0) r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r3, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000000203856b000000faffffff0005000000090002000000000900000000"], 0x20}, 0x1, 0x0, 0x0, 0x14040005}, 0x8000) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x2, 0x800, 0xfffffffe, 0x257, 0x0, r8}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x40, 0x1000000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x200, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x80, 0x3, 0xffffffff}}], 0x1, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xf4) 0s ago: executing program 3 (id=1451): r0 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c011703010902240001010000000904690202ff5aa30009050402100000fa000905820240"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0xe, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x805, 0xfffffffc}, 0x20) ioctl$VIDIOC_G_STD(r0, 0x80085617, 0x0) syz_usb_control_io$rtl8150(r1, &(0x7f0000000200)={0x14, &(0x7f00000000c0)={0x0, 0x0, 0xad, {0xad, 0xe, "16a91958f26b1e85be79219c2a05033ccef51ca2b9f1113cfb76128da137188d74cf8fa21831261db17d87eb09f1696fe33be138f55f2fa20680f89074fbc932167c0df555d9ceabc5c2918056d54415c2c3c2263a72fa89390bba68481d2ae4d8fff0509fd328f70ebfd80d77df09147e81cd8b39be501fed57f5ebb02347e664752c6d42533611acb3529520727704f7ec68c74196fc277d934252c9ba0b70ddc90b0fa1dd2a9753cc69"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x440a}}}, &(0x7f0000000440)={0x2c, &(0x7f0000000240)={0x0, 0x9, 0xd6, "bca527d394414cf25763b5050213e59896670d74a45c6be84f3f4c1c509af36e54839770de4aed24562a27d38cb4dddeded84b78ce7b6c490f38120a1c672c7e04f8864d03f7eee865337583fe3ce0e16946efb91e1172c1bc5748c636b47ad692931f01709269a2e6333589ab50618bcc810f6ae34bf389f3c629416592afe4e410533e5bf40bbb252b033b89c3d28384a0017eff743a88b70f6690db8372fcc2c93c2c1820e1b27fc87d6d784d441e320f984861e4b790c38328e439a2f3eabce9a23c91dfcf255152e7dc84c1f0f455414b49641a"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000380)={0x0, 0x8, 0x1}, &(0x7f00000003c0)={0xc0, 0x5, 0x6, "e8a76a32571c"}, &(0x7f0000000400)={0x40, 0x5, 0x2, '\f5'}}) kernel console output (not intermixed with test programs): xx chip ID (0) [ 257.283301][ T5327] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 257.317386][ T5781] usb 2-1: device descriptor read/64, error -71 [ 257.341282][ T8255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.342256][ T8253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.343021][ T8253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.378346][ T8255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.484546][ T5781] usb usb2-port1: attempt power cycle [ 257.516446][ T5327] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 257.516471][ T5327] em28xx 3-1:0.0: No AC97 audio processor [ 257.917537][ T5327] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 258.033198][ T5781] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 258.054531][ T5781] usb 2-1: device descriptor read/8, error -71 [ 258.082945][ T5327] usb 1-1: Using ep0 maxpacket: 8 [ 258.084917][ T5327] usb 1-1: config 1 has an invalid interface descriptor of length 8, skipping [ 258.084942][ T5327] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 258.084963][ T5327] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 258.087411][ T5327] usb 1-1: New USB device found, idVendor=1235, idProduct=8211, bcdDevice= 0.40 [ 258.087441][ T5327] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.087460][ T5327] usb 1-1: Product: syz [ 258.087475][ T5327] usb 1-1: Manufacturer: syz [ 258.087493][ T5327] usb 1-1: SerialNumber: syz [ 258.293176][ T5781] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 258.316149][ T5781] usb 2-1: device descriptor read/8, error -71 [ 258.316260][ T824] usb 3-1: USB disconnect, device number 43 [ 258.318909][ T824] em28xx 3-1:0.0: Disconnecting em28xx [ 258.395165][ T5327] usb 1-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8211); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 258.395241][ T5327] usb 1-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 258.444270][ T5781] usb usb2-port1: unable to enumerate USB device [ 258.508963][ T824] em28xx 3-1:0.0: Freeing device [ 258.798598][ T5327] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 258.827588][ T5327] usb 1-1: USB disconnect, device number 50 [ 258.939319][ T5616] udevd[5616]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 259.117138][ T8299] netlink: 32 bytes leftover after parsing attributes in process `syz.1.742'. [ 259.543003][ T824] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 259.573693][ T5613] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 259.693878][ T824] usb 2-1: Using ep0 maxpacket: 32 [ 259.701482][ T824] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 6 [ 259.716747][ T824] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 259.716770][ T824] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 259.716785][ T824] usb 2-1: Product: syz [ 259.716796][ T824] usb 2-1: Manufacturer: syz [ 259.716807][ T824] usb 2-1: SerialNumber: syz [ 259.723049][ T5327] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 259.725800][ T824] usb 2-1: config 0 descriptor?? [ 259.757852][ T8309] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 259.775130][ T824] hub 2-1:0.0: bad descriptor, ignoring hub [ 259.775245][ T824] hub 2-1:0.0: probe with driver hub failed with error -5 [ 259.882993][ T5327] usb 3-1: Using ep0 maxpacket: 32 [ 259.884898][ T5327] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 259.884930][ T5327] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.889573][ T5327] usb 3-1: config 0 descriptor?? [ 259.925721][ T5327] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 260.073864][ T824] usb 2-1: USB disconnect, device number 66 [ 260.503224][ T824] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 260.621854][ T5327] gspca_vc032x: reg_w err -71 [ 260.621888][ T5327] gspca_vc032x: I2c Bus Busy Wait 00 [ 260.621900][ T5327] gspca_vc032x: I2c Bus Busy Wait 00 [ 260.621909][ T5327] gspca_vc032x: I2c Bus Busy Wait 00 [ 260.621919][ T5327] gspca_vc032x: I2c Bus Busy Wait 00 [ 260.621927][ T5327] gspca_vc032x: I2c Bus Busy Wait 00 [ 260.621936][ T5327] gspca_vc032x: I2c Bus Busy Wait 00 [ 260.621945][ T5327] gspca_vc032x: I2c Bus Busy Wait 00 [ 260.621955][ T5327] gspca_vc032x: I2c Bus Busy Wait 00 [ 260.621965][ T5327] gspca_vc032x: I2c Bus Busy Wait 00 [ 260.621975][ T5327] gspca_vc032x: I2c Bus Busy Wait 00 [ 260.621984][ T5327] gspca_vc032x: I2c Bus Busy Wait 00 [ 260.621993][ T5327] gspca_vc032x: I2c Bus Busy Wait 00 [ 260.622003][ T5327] gspca_vc032x: I2c Bus Busy Wait 00 [ 260.622012][ T5327] gspca_vc032x: I2c Bus Busy Wait 00 [ 260.622021][ T5327] gspca_vc032x: I2c Bus Busy Wait 00 [ 260.622031][ T5327] gspca_vc032x: I2c Bus Busy Wait 00 [ 260.622039][ T5327] gspca_vc032x: I2c Bus Busy Wait 00 [ 260.622049][ T5327] gspca_vc032x: I2c Bus Busy Wait 00 [ 260.622058][ T5327] gspca_vc032x: Unknown sensor... [ 260.622301][ T5327] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 260.693444][ T824] usb 1-1: Using ep0 maxpacket: 32 [ 260.753235][ T5327] usb 3-1: USB disconnect, device number 44 [ 260.759193][ T824] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 260.759219][ T824] usb 1-1: config 0 has an invalid descriptor of length 226, skipping remainder of the config [ 260.759240][ T824] usb 1-1: config 0 has no interface number 0 [ 260.759300][ T824] usb 1-1: config 0 interface 67 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 260.840486][ T824] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 260.840519][ T824] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.840540][ T824] usb 1-1: Product: syz [ 260.840555][ T824] usb 1-1: Manufacturer: syz [ 260.840571][ T824] usb 1-1: SerialNumber: syz [ 260.877877][ T824] usb 1-1: config 0 descriptor?? [ 261.055964][ T8337] netlink: 276 bytes leftover after parsing attributes in process `syz.1.755'. [ 261.095559][ T824] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 261.095755][ T824] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -22 [ 262.082030][ T8355] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 262.086091][ T8355] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 262.097045][ T8355] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 262.097239][ T8355] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 262.102597][ T8367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.110484][ T8367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.197721][ T8375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.199728][ T8375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.201377][ T8375] netlink: 132 bytes leftover after parsing attributes in process `syz.0.753'. [ 262.244870][ T8375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.252159][ T8375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.392936][ T5704] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 262.433274][ T824] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 262.555742][ T5704] usb 3-1: unable to get BOS descriptor or descriptor too short [ 262.566881][ T5704] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 262.566924][ T5704] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 262.582943][ T824] usb 2-1: Using ep0 maxpacket: 32 [ 262.593394][ T824] usb 2-1: config 9 has an invalid interface number: 39 but max is 1 [ 262.593423][ T824] usb 2-1: config 9 has an invalid interface number: 220 but max is 1 [ 262.593442][ T824] usb 2-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 262.593463][ T824] usb 2-1: config 9 has no interface number 0 [ 262.593479][ T824] usb 2-1: config 9 has no interface number 1 [ 262.593542][ T824] usb 2-1: too many endpoints for config 9 interface 39 altsetting 2: 57, using maximum allowed: 30 [ 262.593581][ T824] usb 2-1: config 9 interface 39 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 57 [ 262.593623][ T824] usb 2-1: config 9 interface 220 altsetting 0 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 262.593651][ T824] usb 2-1: config 9 interface 220 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 262.593689][ T824] usb 2-1: config 9 interface 39 has no altsetting 0 [ 262.595978][ T5704] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 262.596010][ T5704] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.596032][ T5704] usb 3-1: Product: syz [ 262.596047][ T5704] usb 3-1: Manufacturer: syz [ 262.596063][ T5704] usb 3-1: SerialNumber: syz [ 262.597294][ T824] usb 2-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=8e.33 [ 262.597322][ T824] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.597343][ T824] usb 2-1: Product: syz [ 262.597358][ T824] usb 2-1: Manufacturer: syz [ 262.597374][ T824] usb 2-1: SerialNumber: syz [ 262.798706][ T5704] usb 3-1: selecting invalid altsetting 1 [ 262.799581][ T5704] usb 3-1: unit 6 not found! [ 263.024565][ T8374] netlink: 12 bytes leftover after parsing attributes in process `syz.1.766'. [ 263.120408][ T824] ati_remote 2-1:9.39: ati_remote_probe: Unexpected desc.bNumEndpoints [ 263.146365][ T824] rndis_host 2-1:9.220: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 263.158781][ T824] ati_remote 2-1:9.220: ati_remote_probe: Unexpected endpoint_in [ 263.177550][ T5704] usb 3-1: 2:0: failed to get current value for ch 0 (-71) [ 263.219976][ T824] usb 2-1: USB disconnect, device number 67 [ 263.321517][ T5704] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 263.335132][ T5704] usb 3-1: USB disconnect, device number 45 [ 263.414185][ T5613] Bluetooth: hci0: command 0x0406 tx timeout [ 263.415393][ T5616] udevd[5616]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 263.469697][ T32] usb 1-1: USB disconnect, device number 51 [ 263.882979][ T824] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 264.032975][ T824] usb 3-1: Using ep0 maxpacket: 8 [ 264.038551][ T824] usb 3-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 264.038581][ T824] usb 3-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 264.038602][ T824] usb 3-1: Product: syz [ 264.038628][ T824] usb 3-1: Manufacturer: syz [ 264.038642][ T824] usb 3-1: SerialNumber: syz [ 264.103552][ T824] usb 3-1: config 0 descriptor?? [ 264.129170][ T824] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 264.133106][ T5613] Bluetooth: hci1: command 0x0406 tx timeout [ 264.133156][ T5613] Bluetooth: hci3: command 0x0405 tx timeout [ 264.133187][ T5613] Bluetooth: hci2: command 0x0406 tx timeout [ 264.200486][ T8413] tipc: Can't bind to reserved service type 1 [ 264.312964][ T8391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.313609][ T8391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.315956][ T824] gspca_zc3xx: reg_w_i err -71 [ 264.316049][ T824] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 264.343147][ T32] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 264.376489][ T824] usb 3-1: USB disconnect, device number 46 [ 264.516037][ T32] usb 1-1: config 146 has an invalid interface number: 62 but max is 0 [ 264.516067][ T32] usb 1-1: config 146 has no interface number 0 [ 264.516101][ T32] usb 1-1: config 146 interface 62 has no altsetting 0 [ 264.519389][ T32] usb 1-1: New USB device found, idVendor=2c7c, idProduct=0306, bcdDevice=b3.4d [ 264.519420][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.519441][ T32] usb 1-1: Product: syz [ 264.519457][ T32] usb 1-1: Manufacturer: syz [ 264.519473][ T32] usb 1-1: SerialNumber: syz [ 264.642994][ T5704] usb 2-1: new full-speed USB device number 68 using dummy_hcd [ 264.743632][ T8418] netlink: 'syz.3.779': attribute type 10 has an invalid length. [ 264.798619][ T5704] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 264.798652][ T5704] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 264.798690][ T5704] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 264.852206][ T5704] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 264.852238][ T5704] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.852259][ T5704] usb 2-1: Product: syz [ 264.852274][ T5704] usb 2-1: Manufacturer: syz [ 264.852291][ T5704] usb 2-1: SerialNumber: syz [ 264.895439][ T8416] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 265.142012][ T8416] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 265.565093][ T32] qmi_wwan 1-1:146.62: probe with driver qmi_wwan failed with error -22 [ 265.760379][ T32] usb 1-1: USB disconnect, device number 52 [ 265.942918][ T8431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.943574][ T8431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.161932][ T8431] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 266.369241][ T5704] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 266.369283][ T5704] cdc_ncm 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 266.369298][ T5704] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 266.412354][ T8447] sctp: [Deprecated]: syz.3.786 (pid 8447) Use of struct sctp_assoc_value in delayed_ack socket option. [ 266.412354][ T8447] Use struct sctp_sack_info instead [ 266.570098][ T5704] cdc_ncm 2-1:1.0: setting tx_max = 16384 [ 266.661820][ T5704] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 266.723020][ T824] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 266.798690][ T5781] usb 2-1: USB disconnect, device number 68 [ 266.807075][ T5781] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 266.878038][ T824] usb 3-1: too many configurations: 13, using maximum allowed: 8 [ 266.879617][ T824] usb 3-1: config 0 has no interfaces? [ 266.899273][ T824] usb 3-1: config 0 has no interfaces? [ 266.902217][ T824] usb 3-1: config 0 has no interfaces? [ 266.922396][ T824] usb 3-1: config 0 has no interfaces? [ 266.926935][ T824] usb 3-1: config 0 has no interfaces? [ 266.928627][ T824] usb 3-1: config 0 has no interfaces? [ 266.939491][ T824] usb 3-1: config 0 has no interfaces? [ 266.941279][ T824] usb 3-1: config 0 has no interfaces? [ 266.955333][ T824] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 266.955367][ T824] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.955388][ T824] usb 3-1: Product: syz [ 266.955403][ T824] usb 3-1: Manufacturer: syz [ 266.955419][ T824] usb 3-1: SerialNumber: syz [ 266.993524][ T824] usb 3-1: config 0 descriptor?? [ 267.235188][ T8448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.236295][ T8448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.261438][ T5704] usb 3-1: USB disconnect, device number 47 [ 267.413827][ T5689] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 267.562934][ T5689] usb 1-1: Using ep0 maxpacket: 32 [ 267.565351][ T5689] usb 1-1: config 6 has an invalid interface number: 44 but max is 0 [ 267.565378][ T5689] usb 1-1: config 6 has no interface number 0 [ 267.565410][ T5689] usb 1-1: config 6 interface 44 has no altsetting 0 [ 267.569462][ T5689] usb 1-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=be.71 [ 267.569492][ T5689] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.569513][ T5689] usb 1-1: Product: syz [ 267.569528][ T5689] usb 1-1: Manufacturer: syz [ 267.569542][ T5689] usb 1-1: SerialNumber: syz [ 267.651395][ T8462] netlink: 28 bytes leftover after parsing attributes in process `syz.3.792'. [ 267.879923][ T8474] netlink: 8 bytes leftover after parsing attributes in process `syz.3.794'. [ 267.938590][ T5689] cx82310_eth 1-1:6.44: probe with driver cx82310_eth failed with error -22 [ 267.942564][ T5689] cxacru 1-1:6.44: usbatm_usb_probe: bind failed: -19! [ 267.962937][ T5858] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 267.977538][ T5689] usb 1-1: USB disconnect, device number 53 [ 268.115627][ T5858] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 268.115662][ T5858] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 268.115684][ T5858] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x24, changing to 0x4 [ 268.115709][ T5858] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 268.118172][ T5858] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 268.118201][ T5858] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.118221][ T5858] usb 3-1: Product: syz [ 268.118236][ T5858] usb 3-1: Manufacturer: syz [ 268.118252][ T5858] usb 3-1: SerialNumber: syz [ 268.167117][ T5858] usb 3-1: config 0 descriptor?? [ 268.207656][ T5858] adutux 3-1:0.0: interrupt endpoints not found [ 268.265841][ T5781] usb 2-1: new full-speed USB device number 69 using dummy_hcd [ 268.428745][ T5781] usb 2-1: not running at top speed; connect to a high speed hub [ 268.453810][ T5781] usb 2-1: string descriptor 0 read error: -22 [ 268.453962][ T5781] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 268.453986][ T5781] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.541656][ T5781] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 268.800225][ T8467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.804901][ T8467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.042991][ T5781] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 269.273306][ T5781] usb 2-1: USB disconnect, device number 69 [ 269.364053][ T5696] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 269.427135][ T8507] openvswitch: netlink: Missing key (keys=40, expected=100) [ 269.430536][ T8507] openvswitch: netlink: Missing key (keys=40, expected=100) [ 269.514202][ T5696] usb 1-1: Using ep0 maxpacket: 16 [ 269.546580][ T5696] usb 1-1: unable to get BOS descriptor or descriptor too short [ 269.575839][ T5696] usb 1-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=d4.05 [ 269.575870][ T5696] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.575891][ T5696] usb 1-1: Product: syz [ 269.575908][ T5696] usb 1-1: Manufacturer: syz [ 269.575923][ T5696] usb 1-1: SerialNumber: syz [ 269.601631][ T32] usb 3-1: USB disconnect, device number 48 [ 269.879506][ T5696] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 269.880003][ T5696] gspca_vc032x: reg_w err -71 [ 269.880018][ T5696] gspca_vc032x: I2c Bus Busy Wait 00 [ 269.880028][ T5696] gspca_vc032x: I2c Bus Busy Wait 00 [ 269.880037][ T5696] gspca_vc032x: I2c Bus Busy Wait 00 [ 269.880045][ T5696] gspca_vc032x: I2c Bus Busy Wait 00 [ 269.880054][ T5696] gspca_vc032x: I2c Bus Busy Wait 00 [ 269.880063][ T5696] gspca_vc032x: I2c Bus Busy Wait 00 [ 269.880073][ T5696] gspca_vc032x: I2c Bus Busy Wait 00 [ 269.880082][ T5696] gspca_vc032x: I2c Bus Busy Wait 00 [ 269.880091][ T5696] gspca_vc032x: I2c Bus Busy Wait 00 [ 269.880101][ T5696] gspca_vc032x: I2c Bus Busy Wait 00 [ 269.880111][ T5696] gspca_vc032x: I2c Bus Busy Wait 00 [ 269.880120][ T5696] gspca_vc032x: I2c Bus Busy Wait 00 [ 269.880130][ T5696] gspca_vc032x: I2c Bus Busy Wait 00 [ 269.880140][ T5696] gspca_vc032x: I2c Bus Busy Wait 00 [ 269.880150][ T5696] gspca_vc032x: I2c Bus Busy Wait 00 [ 269.880158][ T5696] gspca_vc032x: I2c Bus Busy Wait 00 [ 269.880168][ T5696] gspca_vc032x: I2c Bus Busy Wait 00 [ 269.880177][ T5696] gspca_vc032x: I2c Bus Busy Wait 00 [ 269.880187][ T5696] gspca_vc032x: I2c Bus Busy Wait 00 [ 269.880196][ T5696] gspca_vc032x: Unknown sensor... [ 269.880287][ T5696] vc032x 1-1:12.0: probe with driver vc032x failed with error -22 [ 269.963993][ T5696] usb 1-1: USB disconnect, device number 54 [ 270.060873][ T8520] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 270.060895][ T8520] overlayfs: missing 'lowerdir' [ 270.412990][ T824] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 270.417614][ T8531] netlink: 'syz.1.805': attribute type 11 has an invalid length. [ 270.542937][ T824] usb 3-1: device descriptor read/64, error -71 [ 270.792944][ T824] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 270.923935][ T824] usb 3-1: device descriptor read/64, error -71 [ 271.036011][ T824] usb usb3-port1: attempt power cycle [ 271.373204][ T824] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 271.381700][ T8565] netlink: 276 bytes leftover after parsing attributes in process `syz.1.812'. [ 271.399190][ T824] usb 3-1: device descriptor read/8, error -71 [ 271.632960][ T824] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 271.659430][ T824] usb 3-1: device descriptor read/8, error -71 [ 271.739438][ T8575] 9pnet_virtio: no channels available for device syz [ 271.771105][ T824] usb usb3-port1: unable to enumerate USB device [ 272.145297][ T8583] netlink: 104 bytes leftover after parsing attributes in process `syz.0.818'. [ 272.554908][ T8592] netlink: 168 bytes leftover after parsing attributes in process `syz.1.821'. [ 272.642992][ T32] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 272.793044][ T32] usb 1-1: Using ep0 maxpacket: 32 [ 272.811019][ T32] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 272.811061][ T32] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.830613][ T32] usb 1-1: config 0 descriptor?? [ 272.845928][ T32] as10x_usb: device has been detected [ 272.849610][ T32] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 272.959511][ T32] usb 1-1: DVB: registering adapter 2 frontend 0 (nBox DVB-T Dongle)... [ 273.169260][ T32] as10x_usb: error during firmware upload part1 [ 273.170043][ T32] Registered device nBox DVB-T Dongle [ 273.178437][ T32] usb 1-1: USB disconnect, device number 55 [ 273.291413][ T32] Unregistered device nBox DVB-T Dongle [ 273.295751][ T32] as10x_usb: device has been disconnected [ 273.513059][ T8621] usb usb9: usbfs: process 8621 (syz.2.832) did not claim interface 2 before use [ 273.764597][ T8627] bond0: entered promiscuous mode [ 273.764615][ T8627] bond_slave_0: entered promiscuous mode [ 273.764779][ T8627] bond_slave_1: entered promiscuous mode [ 273.806072][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88804e70fc00: rx timeout, send abort [ 273.807979][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88804e70fc00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 274.144335][ T8652] overlayfs: failed to clone upperpath [ 274.768314][ T32] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 274.914722][ T32] usb 2-1: Using ep0 maxpacket: 16 [ 274.921751][ T32] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 274.921779][ T32] usb 2-1: config 0 has no interface number 0 [ 274.921824][ T32] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 274.921852][ T32] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 274.983025][ T32] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 274.983058][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.983079][ T32] usb 2-1: Product: syz [ 274.983094][ T32] usb 2-1: Manufacturer: syz [ 274.983110][ T32] usb 2-1: SerialNumber: syz [ 274.991382][ T32] usb 2-1: config 0 descriptor?? [ 275.033949][ T8661] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 275.034226][ T8661] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 275.247450][ T8660] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 275.247582][ T8660] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 275.454865][ T32] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 275.456623][ T8668] overlayfs: cannot append lower layer [ 275.556499][ T8670] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 275.559710][ T8670] netlink: 16 bytes leftover after parsing attributes in process `syz.3.850'. [ 276.143112][ T5696] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 276.293818][ T5696] usb 1-1: Using ep0 maxpacket: 16 [ 276.304520][ T5696] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 276.307982][ T5696] usb 1-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 276.308014][ T5696] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.308072][ T5696] usb 1-1: Product: syz [ 276.308083][ T5696] usb 1-1: Manufacturer: syz [ 276.308116][ T5696] usb 1-1: SerialNumber: syz [ 276.335731][ T5696] usb 1-1: config 0 descriptor?? [ 276.368235][ T5696] port100 1-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 276.943232][ T8684] fuse: fd is not a fuse device [ 277.562885][ T8675] comedi comedi1: reset error (fatal) [ 277.587457][ T5781] usb 1-1: USB disconnect, device number 56 [ 278.009691][ T32] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 278.009725][ T32] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 278.010007][ T32] asix 2-1:0.34: probe with driver asix failed with error -71 [ 278.092330][ T32] usb 2-1: USB disconnect, device number 70 [ 278.930301][ T8715] netlink: 40 bytes leftover after parsing attributes in process `syz.1.862'. [ 279.252970][ T32] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 279.403537][ T32] usb 2-1: Using ep0 maxpacket: 8 [ 279.407588][ T32] usb 2-1: config 162 has an invalid interface number: 84 but max is 2 [ 279.407616][ T32] usb 2-1: config 162 has an invalid interface number: 3 but max is 2 [ 279.407638][ T32] usb 2-1: config 162 has no interface number 0 [ 279.407655][ T32] usb 2-1: config 162 has no interface number 1 [ 279.407739][ T32] usb 2-1: config 162 interface 84 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 279.407782][ T32] usb 2-1: config 162 interface 2 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 279.407808][ T32] usb 2-1: config 162 interface 2 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 279.407833][ T32] usb 2-1: config 162 interface 2 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 279.407860][ T32] usb 2-1: config 162 interface 2 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 279.407886][ T32] usb 2-1: config 162 interface 2 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 279.407914][ T32] usb 2-1: config 162 interface 84 has no altsetting 0 [ 279.407933][ T32] usb 2-1: config 162 interface 2 has no altsetting 0 [ 279.417937][ T32] usb 2-1: New USB device found, idVendor=0e8d, idProduct=763f, bcdDevice=9b.23 [ 279.417966][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.417994][ T32] usb 2-1: Product: syz [ 279.418008][ T32] usb 2-1: Manufacturer: syz [ 279.418022][ T32] usb 2-1: SerialNumber: syz [ 279.699191][ T8726] netlink: 'syz.3.865': attribute type 2 has an invalid length. [ 280.085440][ T8728] wireguard: wg2: Could not create IPv4 socket [ 280.150974][ T4909] Bluetooth: hci4: Opcode 0x0c03 failed: -71 [ 280.184193][ T32] usb 2-1: USB disconnect, device number 71 [ 280.279432][ T8732] dvmrp12: entered allmulticast mode [ 280.295619][ T8734] gfs2: gfs2 mount does not exist [ 280.633038][ T5704] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 280.782962][ T5704] usb 1-1: Using ep0 maxpacket: 16 [ 280.792368][ T5704] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 280.792396][ T5704] usb 1-1: config 0 has no interface number 0 [ 280.792442][ T5704] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 280.792461][ T5704] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 280.830216][ T5704] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 280.830249][ T5704] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.830264][ T5704] usb 1-1: Product: syz [ 280.830276][ T5704] usb 1-1: Manufacturer: syz [ 280.830286][ T5704] usb 1-1: SerialNumber: syz [ 280.863146][ T32] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 280.874704][ T5704] usb 1-1: config 0 descriptor?? [ 280.876523][ T8738] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 280.876666][ T8738] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 281.014494][ T32] usb 2-1: Using ep0 maxpacket: 32 [ 281.017624][ T32] usb 2-1: unable to get BOS descriptor or descriptor too short [ 281.038929][ T32] usb 2-1: New USB device found, idVendor=0763, idProduct=0150, bcdDevice= 0.40 [ 281.038962][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.038983][ T32] usb 2-1: Product: syz [ 281.038999][ T32] usb 2-1: SerialNumber: syz [ 281.102268][ T8738] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 281.102396][ T8738] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 281.305917][ T5704] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 281.352309][ T32] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 281.352372][ T32] usb 2-1: MIDIStreaming interface descriptor not found [ 281.509185][ T5704] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 281.509218][ T5704] asix 1-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 281.509513][ T5704] asix 1-1:0.34: probe with driver asix failed with error -61 [ 281.544576][ T32] usb 2-1: USB disconnect, device number 72 [ 281.619321][ T5595] udevd[5595]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 282.021911][ T8750] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 282.189396][ T8753] overlayfs: failed to clone upperpath [ 282.266556][ T8755] netlink: 16 bytes leftover after parsing attributes in process `syz.3.875'. [ 282.285080][ T32] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 282.369831][ T8758] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma? [ 282.433026][ T32] usb 2-1: Using ep0 maxpacket: 8 [ 282.437213][ T32] usb 2-1: config 0 has no interfaces? [ 282.440296][ T32] usb 2-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 282.440318][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.440341][ T32] usb 2-1: Product: syz [ 282.440352][ T32] usb 2-1: Manufacturer: syz [ 282.440363][ T32] usb 2-1: SerialNumber: syz [ 282.466053][ T32] usb 2-1: config 0 descriptor?? [ 282.785802][ T5704] usb 1-1: USB disconnect, device number 57 [ 282.904579][ T8766] IPv6: A: Disabled Multicast RS [ 283.182948][ T5704] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 283.333174][ T5704] usb 1-1: Using ep0 maxpacket: 32 [ 283.347164][ T5704] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 283.347194][ T5704] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 283.347215][ T5704] usb 1-1: config 0 has no interface number 0 [ 283.347283][ T5704] usb 1-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 283.394139][ T5704] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 283.394339][ T5704] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.394363][ T5704] usb 1-1: Product: syz [ 283.394378][ T5704] usb 1-1: Manufacturer: syz [ 283.394394][ T5704] usb 1-1: SerialNumber: syz [ 283.445706][ T5704] usb 1-1: config 0 descriptor?? [ 283.463309][ T5704] radio-si470x 1-1:0.35: could not find interrupt in endpoint [ 283.463394][ T5704] radio-si470x 1-1:0.35: probe with driver radio-si470x failed with error -5 [ 283.703901][ T5704] radio-raremono 1-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 284.115366][ T5704] radio-raremono 1-1:0.35: raremono_cmd_main failed (-71) [ 284.183367][ T5704] radio-raremono 1-1:0.35: V4L2 device registered as radio48 [ 284.191070][ T5704] usb 1-1: USB disconnect, device number 58 [ 284.202321][ T5704] radio-raremono 1-1:0.35: Thanko's Raremono disconnected [ 284.333864][ T8818] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 284.429179][ T8824] netlink: 128 bytes leftover after parsing attributes in process `syz.2.901'. [ 284.429205][ T8824] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 284.866138][ T8847] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.909'. [ 284.891661][ T5704] usb 2-1: USB disconnect, device number 73 [ 285.362441][ T8859] netlink: 4 bytes leftover after parsing attributes in process `syz.2.912'. [ 285.663833][ T5696] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 285.814199][ T5696] usb 3-1: Using ep0 maxpacket: 8 [ 285.837319][ T5696] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 285.837354][ T5696] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 285.837382][ T5696] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 285.837407][ T5696] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 285.837451][ T5696] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 285.837476][ T5696] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.962984][ T32] usb 2-1: new full-speed USB device number 74 using dummy_hcd [ 286.077137][ T8867] netlink: 104 bytes leftover after parsing attributes in process `syz.3.916'. [ 286.083885][ T8867] netlink: 104 bytes leftover after parsing attributes in process `syz.3.916'. [ 286.119802][ T32] usb 2-1: config 0 has an invalid interface number: 4 but max is 0 [ 286.119831][ T32] usb 2-1: config 0 has no interface number 0 [ 286.120082][ T32] usb 2-1: too many endpoints for config 0 interface 4 altsetting 13: 254, using maximum allowed: 30 [ 286.120127][ T32] usb 2-1: config 0 interface 4 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 286.120155][ T32] usb 2-1: config 0 interface 4 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 286.120179][ T32] usb 2-1: config 0 interface 4 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 286.120295][ T32] usb 2-1: config 0 interface 4 has no altsetting 0 [ 286.120333][ T32] usb 2-1: New USB device found, idVendor=046d, idProduct=c53f, bcdDevice= 0.00 [ 286.120358][ T32] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.124960][ T5696] usb 3-1: GET_CAPABILITIES returned 0 [ 286.125011][ T5696] usbtmc 3-1:16.0: can't read capabilities [ 286.254266][ T32] usb 2-1: config 0 descriptor?? [ 286.517018][ T824] usb 3-1: USB disconnect, device number 53 [ 286.697618][ T8865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.702390][ T8865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.752318][ T32] logitech-djreceiver 0003:046D:C53F.0006: unknown main item tag 0x0 [ 286.752368][ T32] logitech-djreceiver 0003:046D:C53F.0006: unknown main item tag 0x0 [ 286.752397][ T32] logitech-djreceiver 0003:046D:C53F.0006: unknown main item tag 0x0 [ 286.752430][ T32] logitech-djreceiver 0003:046D:C53F.0006: unknown main item tag 0x0 [ 286.752457][ T32] logitech-djreceiver 0003:046D:C53F.0006: unknown main item tag 0x0 [ 286.752483][ T32] logitech-djreceiver 0003:046D:C53F.0006: unknown main item tag 0x0 [ 286.752510][ T32] logitech-djreceiver 0003:046D:C53F.0006: unknown main item tag 0x0 [ 286.752537][ T32] logitech-djreceiver 0003:046D:C53F.0006: unknown main item tag 0x0 [ 286.752563][ T32] logitech-djreceiver 0003:046D:C53F.0006: unknown main item tag 0x0 [ 286.752590][ T32] logitech-djreceiver 0003:046D:C53F.0006: unknown main item tag 0x0 [ 286.776479][ T5613] Bluetooth: hci0: Opcode 0x206a failed: -110 [ 286.795808][ T5613] Bluetooth: hci0: command 0x0406 tx timeout [ 286.998549][ T32] logitech-djreceiver 0003:046D:C53F.0006: hidraw0: USB HID v0.0c Device [HID 046d:c53f] on usb-dummy_hcd.1-1/input4 [ 287.016299][ T32] usb 2-1: USB disconnect, device number 74 [ 287.120225][ T8879] fido_id[8879]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 287.278393][ T8884] fuse: fd is not a fuse device [ 287.897679][ T8899] i2c i2c-0: DVB: adapter 0 frontend 0 symbol rate 3 out of range (1000000..45000000) [ 287.929515][ T8899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.930105][ T8899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.014783][ T8905] 9p: Bad value for 'rfdno' [ 288.015865][ T8905] 9p: Bad value for 'rfdno' [ 288.016165][ T8905] 9p: Bad value for 'rfdno' [ 288.017311][ T8905] 9p: Bad value for 'rfdno' [ 288.174724][ T824] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 288.325339][ T824] usb 3-1: config index 0 descriptor too short (expected 1572, got 36) [ 288.325372][ T824] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 288.328001][ T824] usb 3-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40 [ 288.328033][ T824] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.328056][ T824] usb 3-1: Product: syz [ 288.328072][ T824] usb 3-1: Manufacturer: syz [ 288.328087][ T824] usb 3-1: SerialNumber: syz [ 288.400842][ T824] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input18 [ 288.662069][ T4946] bcm5974 3-1:1.0: could not read from device [ 288.722321][ T824] bcm5974 3-1:1.0: could not read from device [ 288.723563][ T5689] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 288.757768][ T4946] bcm5974 3-1:1.0: could not read from device [ 288.882922][ T5689] usb 2-1: Using ep0 maxpacket: 32 [ 288.887263][ T5689] usb 2-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 288.887292][ T5689] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.887327][ T5689] usb 2-1: Product: syz [ 288.887338][ T5689] usb 2-1: Manufacturer: syz [ 288.887348][ T5689] usb 2-1: SerialNumber: syz [ 288.897382][ T5689] usb 2-1: config 0 descriptor?? [ 288.931116][ T824] input: failed to attach handler mousedev to device input18, error: -5 [ 288.949474][ T5689] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 288.949777][ T5689] dvb-usb: bulk message failed: -22 (4/0) [ 288.949816][ T5689] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 288.950154][ T5689] dvb-usb: bulk message failed: -22 (5/0) [ 288.950210][ T5689] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 289.018525][ T824] usb 3-1: USB disconnect, device number 54 [ 289.073114][ T5689] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 289.074590][ T5689] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 289.074647][ T5689] usb 2-1: media controller created [ 289.183791][ T5689] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 289.262234][ T5689] usb 2-1: selecting invalid altsetting 3 [ 289.262256][ T5689] ttusb2: set interface to alts=3 failed [ 289.393830][ T5689] DVB: Unable to find symbol tda10086_attach() [ 289.393847][ T5689] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 289.394698][ T5689] dvb-usb: bulk message failed: -22 (4/0) [ 289.394715][ T5689] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 289.394800][ T5689] dvb-usb: bulk message failed: -22 (5/0) [ 289.394810][ T5689] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 289.394855][ T5689] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 289.468509][ T5689] usb 2-1: USB disconnect, device number 75 [ 289.603015][ T5689] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 289.769760][ T8926] netlink: 16 bytes leftover after parsing attributes in process `syz.2.934'. [ 290.233006][ T5689] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 290.416850][ T5689] usb 1-1: Using ep0 maxpacket: 32 [ 290.439119][ T5689] usb 1-1: config 6 has an invalid interface number: 126 but max is 2 [ 290.439150][ T5689] usb 1-1: config 6 has an invalid interface number: 178 but max is 2 [ 290.439180][ T5689] usb 1-1: config 6 has an invalid interface number: 150 but max is 2 [ 290.439203][ T5689] usb 1-1: config 6 has no interface number 0 [ 290.439220][ T5689] usb 1-1: config 6 has no interface number 1 [ 290.439237][ T5689] usb 1-1: config 6 has no interface number 2 [ 290.439341][ T5689] usb 1-1: config 6 interface 126 altsetting 4 bulk endpoint 0x8 has invalid maxpacket 16 [ 290.439366][ T5689] usb 1-1: config 6 interface 126 altsetting 4 bulk endpoint 0xB has invalid maxpacket 8 [ 290.439410][ T5689] usb 1-1: config 6 interface 178 altsetting 0 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 290.439438][ T5689] usb 1-1: config 6 interface 178 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 290.439475][ T5689] usb 1-1: config 6 interface 150 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 290.439498][ T5689] usb 1-1: config 6 interface 150 altsetting 3 has a duplicate endpoint with address 0xE, skipping [ 290.439521][ T5689] usb 1-1: config 6 interface 150 altsetting 3 has a duplicate endpoint with address 0xD, skipping [ 290.439544][ T5689] usb 1-1: config 6 interface 150 altsetting 3 bulk endpoint 0xA has invalid maxpacket 1024 [ 290.439571][ T5689] usb 1-1: config 6 interface 150 altsetting 3 has a duplicate endpoint with address 0x7, skipping [ 290.439594][ T5689] usb 1-1: config 6 interface 126 has no altsetting 0 [ 290.439612][ T5689] usb 1-1: config 6 interface 150 has no altsetting 0 [ 290.445851][ T5689] usb 1-1: New USB device found, idVendor=1110, idProduct=9010, bcdDevice=cf.16 [ 290.445882][ T5689] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.445904][ T5689] usb 1-1: Product:  [ 290.445919][ T5689] usb 1-1: Manufacturer: Ñ [ 290.445934][ T5689] usb 1-1: SerialNumber: Ñ [ 290.653211][ T8932] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 290.653389][ T8932] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 290.874378][ T8932] netlink: 68 bytes leftover after parsing attributes in process `syz.0.936'. [ 290.940454][ T8936] process '/newroot/285/file0' started with executable stack [ 290.953096][ T5704] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 291.157888][ T5704] usb 2-1: unable to get BOS descriptor or descriptor too short [ 291.162750][ T5704] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 291.199816][ T5704] usb 2-1: string descriptor 0 read error: -22 [ 291.200032][ T5704] usb 2-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 291.200117][ T5704] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.784444][ T32] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 291.937509][ T32] usb 3-1: unable to get BOS descriptor or descriptor too short [ 291.942326][ T32] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 291.942355][ T32] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 291.942416][ T32] usb 3-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 291.942458][ T32] usb 3-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 291.942500][ T32] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 291.942527][ T32] usb 3-1: config 1 interface 1 has no altsetting 0 [ 291.970953][ T32] usb 3-1: string descriptor 0 read error: -22 [ 291.971169][ T32] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 291.971203][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.432325][ T8964] netlink: 64 bytes leftover after parsing attributes in process `syz.3.946'. [ 292.850318][ T5704] usb 2-1: 1:1: cannot set freq 48000 to ep 0x1 [ 292.861516][ T32] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 292.861558][ T32] usb 3-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 292.861579][ T32] usb 3-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1 [ 293.318580][ T32] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 293.581910][ T32] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 293.790486][ T32] usb 3-1: USB disconnect, device number 55 [ 294.299027][ T5704] usb 2-1: USB disconnect, device number 76 [ 294.570048][ T9000] ÿÿÿÿÿÿ: renamed from hsr0 (while UP) [ 294.902998][ T5704] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 295.053192][ T5704] usb 2-1: Using ep0 maxpacket: 16 [ 295.069965][ T5704] usb 2-1: unable to get BOS descriptor or descriptor too short [ 295.083588][ T5704] usb 2-1: config 4 has an invalid interface number: 127 but max is 0 [ 295.083619][ T5704] usb 2-1: config 4 has no interface number 0 [ 295.083652][ T5704] usb 2-1: config 4 interface 127 has no altsetting 0 [ 295.116867][ T5704] usb 2-1: string descriptor 0 read error: -22 [ 295.117016][ T5704] usb 2-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=2b.48 [ 295.117046][ T5704] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.299066][ T5689] usb 1-1: reset high-speed USB device number 59 using dummy_hcd [ 295.358202][ T5696] usb 2-1: USB disconnect, device number 77 [ 295.618284][ T5689] usb 1-1: device descriptor read/64, error -71 [ 295.967962][ T5689] usb 1-1: reset high-speed USB device number 59 using dummy_hcd [ 296.092939][ T5689] usb 1-1: device descriptor read/64, error -71 [ 296.333034][ T5689] usb 1-1: reset high-speed USB device number 59 using dummy_hcd [ 296.404796][ T5689] usb 1-1: device descriptor read/8, error -71 [ 296.654381][ T5689] usb 1-1: reset high-speed USB device number 59 using dummy_hcd [ 296.705563][ T5689] usb 1-1: device descriptor read/8, error -71 [ 296.770294][ T9085] netlink: 132 bytes leftover after parsing attributes in process `syz.3.989'. [ 296.814434][ T5704] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 296.864436][ T5689] usb 1-1: [ueagle-atm] pre-firmware device, uploading firmware [ 296.889893][ T5689] usb 1-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 296.895310][ T5327] usb 1-1: Direct firmware load for ueagle-atm/eagleI.fw failed with error -2 [ 296.895338][ T5327] usb 1-1: Falling back to sysfs fallback for: ueagle-atm/eagleI.fw [ 296.928139][ T5689] usb 1-1: [ueagle-atm] pre-firmware device, uploading firmware [ 296.956319][ T5689] usb 1-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 296.980972][ T5704] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 296.981008][ T5704] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 296.981052][ T5704] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 296.981076][ T5704] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.047089][ T5704] usb 2-1: config 0 descriptor?? [ 297.082750][ T5689] usb 1-1: [ueagle-atm] pre-firmware device, uploading firmware [ 297.086930][ T5689] usb 1-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 297.116770][ T5689] usb 1-1: USB disconnect, device number 59 [ 297.279075][ T5704] ath6kl: Failed to submit usb control message: -71 [ 297.279131][ T5704] ath6kl: unable to send the bmi data to the device: -71 [ 297.279147][ T5704] ath6kl: Unable to send get target info: -71 [ 297.280380][ T5704] ath6kl: Failed to init ath6kl core: -71 [ 297.282674][ T5704] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 297.324376][ T5704] usb 2-1: USB disconnect, device number 78 [ 297.485026][ T5689] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 297.613163][ T5689] usb 1-1: device descriptor read/64, error -71 [ 297.872246][ T5613] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 297.934361][ T9122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.937300][ T9122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.068296][ T39] audit: type=1800 audit(1783315847.381:7): pid=9124 uid=0 auid=4294967295 ses=4294967295 op=set_data cause=unavailable-hash-algorithm comm="syz.2.1003" name="/autofs" dev="devtmpfs" ino=98 res=0 errno=0 [ 298.098139][ T5689] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 298.252924][ T5689] usb 1-1: Using ep0 maxpacket: 16 [ 298.256574][ T5689] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024 [ 298.256609][ T5689] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 298.256637][ T5689] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 298.256660][ T5689] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 298.304087][ T5689] usb 1-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 298.304121][ T5689] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.304143][ T5689] usb 1-1: Product: syz [ 298.304158][ T5689] usb 1-1: Manufacturer: syz [ 298.304190][ T5689] usb 1-1: SerialNumber: syz [ 298.354935][ T5689] usb 1-1: config 0 descriptor?? [ 298.355743][ T9111] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 298.405678][ C0] port100 1-1:0.0: NFC: Urb failure (status -71) [ 298.417235][ T5689] port100 1-1:0.0: NFC: Could not get supported command types [ 298.594387][ T9150] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1008'. [ 298.644664][ T9150] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 299.043646][ T5704] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 299.065347][ T5689] usb 1-1: USB disconnect, device number 61 [ 299.192935][ T5704] usb 2-1: Using ep0 maxpacket: 16 [ 299.196645][ T5704] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 299.196697][ T5704] usb 2-1: New USB device found, idVendor=05ac, idProduct=025b, bcdDevice= 0.00 [ 299.196722][ T5704] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.201706][ T5704] usb 2-1: config 0 descriptor?? [ 299.202528][ T9156] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 299.243038][ T201] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 299.423837][ T201] usb 3-1: Using ep0 maxpacket: 16 [ 299.437123][ T201] usb 3-1: unable to get BOS descriptor or descriptor too short [ 299.441926][ T201] usb 3-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=d4.05 [ 299.441960][ T201] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.442040][ T201] usb 3-1: Product: syz [ 299.442051][ T201] usb 3-1: Manufacturer: syz [ 299.442062][ T201] usb 3-1: SerialNumber: syz [ 299.715726][ T201] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 299.719473][ T201] gspca_vc032x: reg_w err -71 [ 299.719492][ T201] gspca_vc032x: I2c Bus Busy Wait 00 [ 299.719504][ T201] gspca_vc032x: I2c Bus Busy Wait 00 [ 299.719523][ T201] gspca_vc032x: I2c Bus Busy Wait 00 [ 299.719533][ T201] gspca_vc032x: I2c Bus Busy Wait 00 [ 299.719543][ T201] gspca_vc032x: I2c Bus Busy Wait 00 [ 299.719553][ T201] gspca_vc032x: I2c Bus Busy Wait 00 [ 299.719562][ T201] gspca_vc032x: I2c Bus Busy Wait 00 [ 299.719572][ T201] gspca_vc032x: I2c Bus Busy Wait 00 [ 299.719581][ T201] gspca_vc032x: I2c Bus Busy Wait 00 [ 299.719591][ T201] gspca_vc032x: I2c Bus Busy Wait 00 [ 299.719600][ T201] gspca_vc032x: I2c Bus Busy Wait 00 [ 299.719610][ T201] gspca_vc032x: I2c Bus Busy Wait 00 [ 299.719619][ T201] gspca_vc032x: I2c Bus Busy Wait 00 [ 299.719629][ T201] gspca_vc032x: I2c Bus Busy Wait 00 [ 299.719638][ T201] gspca_vc032x: I2c Bus Busy Wait 00 [ 299.719648][ T201] gspca_vc032x: I2c Bus Busy Wait 00 [ 299.719656][ T201] gspca_vc032x: I2c Bus Busy Wait 00 [ 299.719666][ T201] gspca_vc032x: I2c Bus Busy Wait 00 [ 299.719676][ T201] gspca_vc032x: I2c Bus Busy Wait 00 [ 299.719685][ T201] gspca_vc032x: Unknown sensor... [ 299.719772][ T201] vc032x 3-1:12.0: probe with driver vc032x failed with error -22 [ 299.730815][ T5704] hid_parser_main: 30 callbacks suppressed [ 299.730881][ T5704] apple 0003:05AC:025B.0007: unknown main item tag 0x0 [ 299.730982][ T5704] apple 0003:05AC:025B.0007: unknown main item tag 0x0 [ 299.731060][ T5704] apple 0003:05AC:025B.0007: unknown main item tag 0x0 [ 299.731128][ T5704] apple 0003:05AC:025B.0007: unknown main item tag 0x0 [ 299.731202][ T5704] apple 0003:05AC:025B.0007: unknown main item tag 0x0 [ 299.731277][ T5704] apple 0003:05AC:025B.0007: unknown main item tag 0x0 [ 299.731343][ T5704] apple 0003:05AC:025B.0007: unknown main item tag 0x0 [ 299.731416][ T5704] apple 0003:05AC:025B.0007: unknown main item tag 0x0 [ 299.731483][ T5704] apple 0003:05AC:025B.0007: unknown main item tag 0x0 [ 299.731558][ T5704] apple 0003:05AC:025B.0007: unknown main item tag 0x0 [ 299.802971][ T201] usb 3-1: USB disconnect, device number 57 [ 300.018324][ T5704] apple 0003:05AC:025B.0007: hidraw0: USB HID v7f.fd Device [HID 05ac:025b] on usb-dummy_hcd.1-1/input0 [ 300.019137][ T9173] Flush: task=syz.0.1016[9173] dev=loop5 state=2 [ 300.094722][ T9173] Teardown: task=syz.0.1016[9173] dev=loop5 state=2 [ 300.361167][ T9184] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1020'. [ 300.532970][ T5704] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 300.683787][ T5704] usb 1-1: Using ep0 maxpacket: 32 [ 300.687252][ T5704] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 300.687290][ T5704] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 300.687332][ T5704] usb 1-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 300.687359][ T5704] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.706327][ T5704] usb 1-1: config 0 descriptor?? [ 300.791471][ T9191] random: crng reseeded on system resumption [ 300.999553][ T5704] magicmouse 0003:05AC:0324.0008: hidraw1: USB HID v0.81 Device [HID 05ac:0324] on usb-dummy_hcd.0-1/input0 [ 301.184190][ T5704] usb 1-1: USB disconnect, device number 62 [ 301.473151][ T9] usb 3-1: new full-speed USB device number 58 using dummy_hcd [ 301.612467][ T39] audit: type=1326 audit(1783315850.961:8): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=9217 comm="syz.3.1030" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3b55aede59 code=0x0 [ 301.623198][ T9] usb 3-1: device descriptor read/64, error -71 [ 301.825679][ T824] usb 2-1: USB disconnect, device number 79 [ 301.864453][ T9] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 301.983112][ T5704] usb 1-1: new full-speed USB device number 63 using dummy_hcd [ 301.993750][ T9] usb 3-1: device descriptor read/64, error -71 [ 302.103575][ T9] usb usb3-port1: attempt power cycle [ 302.113013][ T5704] usb 1-1: device descriptor read/64, error -71 [ 302.157066][ T9227] fuse: Unknown parameter '' [ 302.352980][ T5704] usb 1-1: new full-speed USB device number 64 using dummy_hcd [ 302.443286][ T9] usb 3-1: new full-speed USB device number 60 using dummy_hcd [ 302.463843][ T9] usb 3-1: device descriptor read/8, error -71 [ 302.483059][ T5704] usb 1-1: device descriptor read/64, error -71 [ 302.543005][ T824] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 302.593793][ T5704] usb usb1-port1: attempt power cycle [ 302.703016][ T9] usb 3-1: new full-speed USB device number 61 using dummy_hcd [ 302.704679][ T824] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 302.704710][ T824] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.704744][ T824] usb 2-1: Product: syz [ 302.704754][ T824] usb 2-1: Manufacturer: syz [ 302.704765][ T824] usb 2-1: SerialNumber: syz [ 302.752687][ T9] usb 3-1: device descriptor read/8, error -71 [ 302.853819][ T9] usb usb3-port1: unable to enumerate USB device [ 302.944314][ T5704] usb 1-1: new full-speed USB device number 65 using dummy_hcd [ 302.976672][ T5704] usb 1-1: device descriptor read/8, error -71 [ 303.230410][ T5704] usb 1-1: new full-speed USB device number 66 using dummy_hcd [ 303.245196][ T5704] usb 1-1: device descriptor read/8, error -71 [ 303.335564][ T824] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -EPROTO [ 303.335631][ T824] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 303.336168][ T824] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 303.336223][ T824] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 303.339536][ T824] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 303.358989][ T5704] usb usb1-port1: unable to enumerate USB device [ 303.404703][ T824] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 303.423323][ T824] usb 2-1: USB disconnect, device number 80 [ 304.373093][ T9] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 304.503104][ T9] usb 2-1: device descriptor read/64, error -71 [ 304.649355][ T9270] kvm: requested 136609 ns i8254 timer period limited to 200000 ns [ 304.651845][ T9270] kvm: requested 185219 ns i8254 timer period limited to 200000 ns [ 304.669240][ T9270] kvm: requested 99733 ns i8254 timer period limited to 200000 ns [ 304.673935][ T9270] kvm: requested 17600 ns i8254 timer period limited to 200000 ns [ 304.684228][ T9270] kvm: requested 166781 ns i8254 timer period limited to 200000 ns [ 304.701835][ T9270] kvm: requested 54476 ns i8254 timer period limited to 200000 ns [ 304.702499][ T9270] kvm: requested 62857 ns i8254 timer period limited to 200000 ns [ 304.713929][ T9270] kvm: requested 178514 ns i8254 timer period limited to 200000 ns [ 304.720187][ T9270] kvm: requested 193600 ns i8254 timer period limited to 200000 ns [ 304.737365][ T9270] kvm: requested 128228 ns i8254 timer period limited to 200000 ns [ 304.754772][ T9] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 304.787441][ T9270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.788253][ T9270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.893236][ T9] usb 2-1: device descriptor read/64, error -71 [ 304.908156][ T9277] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1049'. [ 304.943845][ T9278] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1049'. [ 305.003627][ T9] usb usb2-port1: attempt power cycle [ 305.013092][ T32] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 305.163077][ T32] usb 3-1: Using ep0 maxpacket: 8 [ 305.164047][ T32] usb 3-1: too many configurations: 228, using maximum allowed: 8 [ 305.165490][ T32] usb 3-1: config 0 has no interfaces? [ 305.166789][ T32] usb 3-1: config 0 has no interfaces? [ 305.167917][ T32] usb 3-1: config 0 has no interfaces? [ 305.169042][ T32] usb 3-1: config 0 has no interfaces? [ 305.170164][ T32] usb 3-1: config 0 has no interfaces? [ 305.171284][ T32] usb 3-1: config 0 has no interfaces? [ 305.172417][ T32] usb 3-1: config 0 has no interfaces? [ 305.222984][ T32] usb 3-1: config 0 has no interfaces? [ 305.223024][ T32] usb 3-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 305.223048][ T32] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.255996][ T32] usb 3-1: config 0 descriptor?? [ 305.343013][ T9] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 305.364681][ T9] usb 2-1: device descriptor read/8, error -71 [ 305.487240][ T32] usb 3-1: string descriptor 0 read error: -71 [ 305.516748][ T32] usb 3-1: USB disconnect, device number 62 [ 305.603833][ T9] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 305.624831][ T9] usb 2-1: device descriptor read/8, error -71 [ 305.663122][ T5704] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 305.734275][ T9] usb usb2-port1: unable to enumerate USB device [ 305.833003][ T5704] usb 1-1: Using ep0 maxpacket: 8 [ 305.834875][ T5704] usb 1-1: config 3 has an invalid interface number: 27 but max is 0 [ 305.834903][ T5704] usb 1-1: config 3 has no interface number 0 [ 305.834935][ T5704] usb 1-1: config 3 interface 27 has no altsetting 0 [ 305.837314][ T5704] usb 1-1: New USB device found, idVendor=0c8e, idProduct=6000, bcdDevice=4a.2e [ 305.837342][ T5704] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.837370][ T5704] usb 1-1: Product: syz [ 305.837381][ T5704] usb 1-1: Manufacturer: syz [ 305.837391][ T5704] usb 1-1: SerialNumber: syz [ 306.142693][ T9304] overlayfs: failed to clone upperpath [ 306.153336][ T9303] overlayfs: failed to clone upperpath [ 306.174404][ T5704] usb 1-1: USB disconnect, device number 67 [ 306.208058][ T9303] C: renamed from veth1_to_team (while UP) [ 306.252278][ T9303] netlink: 'syz.3.1058': attribute type 4 has an invalid length. [ 306.252294][ T9303] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1058'. [ 306.252625][ T9303] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 306.253443][ T9304] netlink: 'syz.3.1058': attribute type 4 has an invalid length. [ 306.253462][ T9304] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1058'. [ 306.305915][ T9304] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 306.956317][ T9321] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 306.962331][ T9321] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 306.996363][ T9323] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1067'. [ 307.025154][ T9321] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 307.063037][ T5696] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 307.217430][ T5696] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 307.217476][ T5696] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.217497][ T5696] usb 1-1: Product: syz [ 307.217512][ T5696] usb 1-1: Manufacturer: syz [ 307.217527][ T5696] usb 1-1: SerialNumber: syz [ 307.270573][ T5696] usb 1-1: config 0 descriptor?? [ 307.279912][ T5696] ch341 1-1:0.0: ch341-uart converter detected [ 307.394141][ T9334] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1072'. [ 307.394166][ T9334] openvswitch: netlink: Flow actions attr not present in new flow. [ 307.395027][ T9335] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1072'. [ 307.395048][ T9335] openvswitch: netlink: Flow actions attr not present in new flow. [ 307.532987][ T5704] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 307.683218][ T5704] usb 2-1: Using ep0 maxpacket: 16 [ 307.686894][ T5704] usb 2-1: config index 0 descriptor too short (expected 51443, got 18) [ 307.705627][ T5696] usb 1-1: failed to send control message: -71 [ 307.705690][ T5696] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 307.707235][ T5704] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 307.707264][ T5704] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.707285][ T5704] usb 2-1: Product: syz [ 307.707300][ T5704] usb 2-1: Manufacturer: syz [ 307.707316][ T5704] usb 2-1: SerialNumber: syz [ 307.759965][ T9343] netdevsim netdevsim3: Direct firmware load for  failed with error -2 [ 307.760048][ T9343] netdevsim netdevsim3: Falling back to sysfs fallback for:  [ 307.791608][ T5704] r8152-cfgselector 2-1: Unknown version 0x0000 [ 307.791636][ T5704] r8152-cfgselector 2-1: config 0 descriptor?? [ 307.792585][ T5696] usb 1-1: USB disconnect, device number 68 [ 307.822461][ T5696] ch341 1-1:0.0: device disconnected [ 308.040577][ T9350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.042206][ T9350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.113033][ T5696] r8152-cfgselector 2-1: USB disconnect, device number 85 [ 308.466857][ T9366] comedi comedi1: das16m1: I/O base address not correctly aligned [ 308.627982][ T9372] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 308.847651][ T9386] netlink: 'syz.3.1089': attribute type 10 has an invalid length. [ 308.883370][ T9] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 308.967067][ T9395] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1091'. [ 308.967090][ T9395] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1091'. [ 308.988480][ T9396] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1091'. [ 309.034749][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 309.038798][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 309.041316][ T9] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 309.041346][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.041367][ T9] usb 2-1: Product: syz [ 309.041382][ T9] usb 2-1: Manufacturer: syz [ 309.041397][ T9] usb 2-1: SerialNumber: syz [ 309.098992][ T9] usb 2-1: config 0 descriptor?? [ 309.156816][ T9386] team0: Port device dummy0 added [ 309.318874][ T9] usb 2-1: USB disconnect, device number 86 [ 309.902981][ T824] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 310.033326][ T9] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 310.052913][ T824] usb 1-1: Using ep0 maxpacket: 8 [ 310.058294][ T824] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 310.058319][ T824] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.058333][ T824] usb 1-1: Product: syz [ 310.058344][ T824] usb 1-1: Manufacturer: syz [ 310.058354][ T824] usb 1-1: SerialNumber: syz [ 310.103531][ T824] usb 1-1: config 0 descriptor?? [ 310.125834][ T824] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 310.208409][ T9] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 310.208441][ T9] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 310.208463][ T9] usb 3-1: Product: syz [ 310.208479][ T9] usb 3-1: SerialNumber: syz [ 310.223001][ T201] usb 2-1: new full-speed USB device number 87 using dummy_hcd [ 310.248474][ T9] usb 3-1: config 0 descriptor?? [ 310.418779][ T201] usb 2-1: unable to get BOS descriptor or descriptor too short [ 310.419628][ T201] usb 2-1: not running at top speed; connect to a high speed hub [ 310.442350][ T201] usb 2-1: config 12 has an invalid interface number: 104 but max is 0 [ 310.442381][ T201] usb 2-1: config 12 has no interface number 0 [ 310.442490][ T201] usb 2-1: config 12 interface 104 altsetting 9 has an endpoint descriptor with address 0x1F, changing to 0xF [ 310.442521][ T201] usb 2-1: config 12 interface 104 has no altsetting 0 [ 310.489631][ T201] usb 2-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=e6.f3 [ 310.489664][ T201] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.489686][ T201] usb 2-1: Product: syz [ 310.489702][ T201] usb 2-1: Manufacturer: syz [ 310.489718][ T201] usb 2-1: SerialNumber: syz [ 310.651421][ T824] gspca_sonixj: reg_w1 err -110 [ 310.651529][ T824] sonixj 1-1:0.0: probe with driver sonixj failed with error -110 [ 310.746761][ T201] usbserial_generic 2-1:12.104: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 310.746779][ T201] usbserial_generic 2-1:12.104: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 310.746810][ T201] usbserial_generic 2-1:12.104: generic converter detected [ 310.796897][ T201] usb 2-1: generic converter now attached to ttyUSB0 [ 310.829620][ T201] usb 2-1: USB disconnect, device number 87 [ 310.858540][ T201] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 310.879003][ T201] usbserial_generic 2-1:12.104: device disconnected [ 311.033528][ T9442] __nla_validate_parse: 1 callbacks suppressed [ 311.033543][ T9442] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1103'. [ 311.388416][ T5613] Bluetooth: hci3: unexpected event for opcode 0x0c20 [ 311.633060][ T201] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 311.795597][ T201] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 311.795634][ T201] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.799950][ T201] usb 2-1: config 0 descriptor?? [ 311.833691][ T201] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 312.080048][ T201] gp8psk: usb in 128 operation failed. [ 312.080711][ T201] gp8psk: usb in 137 operation failed. [ 312.080774][ T201] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 312.082517][ T201] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 312.082602][ T201] usb 2-1: media controller created [ 312.129837][ T201] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 312.169248][ T201] gp8psk_fe: Frontend attached [ 312.169305][ T201] usb 2-1: DVB: registering adapter 2 frontend 0 (Genpix DVB-S)... [ 312.181845][ T201] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 312.287011][ T201] gp8psk: usb in 138 operation failed. [ 312.287033][ T201] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 312.287046][ T201] gp8psk: found Genpix USB device pID = 203 (hex) [ 312.295974][ T201] usb 2-1: USB disconnect, device number 88 [ 312.414436][ T201] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 312.829043][ T9] usb 3-1: USB disconnect, device number 63 [ 312.924988][ T201] usb 1-1: USB disconnect, device number 69 [ 314.208563][ T9490] 9p: Bad value for 'rfdno' [ 314.208988][ T9490] 9p: Bad value for 'rfdno' [ 314.209355][ T9490] 9p: Bad value for 'rfdno' [ 314.209742][ T9490] 9p: Bad value for 'rfdno' [ 315.646673][ T9458] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 315.890183][ T9511] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 315.890203][ T9511] IPv6: NLM_F_CREATE should be set when creating new route [ 316.144354][ T5613] Bluetooth: hci0: command 0x0406 tx timeout [ 316.205040][ T9526] netlink: 'syz.3.1128': attribute type 10 has an invalid length. [ 316.223017][ T9] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 316.314848][ T5704] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 316.373654][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 316.376505][ T9] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 316.376535][ T9] usb 2-1: config 0 has no interface number 0 [ 316.376583][ T9] usb 2-1: config 0 interface 184 has no altsetting 0 [ 316.380652][ T9] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 316.380675][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.380688][ T9] usb 2-1: Product: syz [ 316.380699][ T9] usb 2-1: Manufacturer: syz [ 316.380710][ T9] usb 2-1: SerialNumber: syz [ 316.455305][ T5704] usb 1-1: device descriptor read/64, error -71 [ 316.461065][ T9] usb 2-1: config 0 descriptor?? [ 316.467400][ T9536] netlink: 'syz.2.1133': attribute type 21 has an invalid length. [ 316.470438][ T9537] netlink: 'syz.2.1133': attribute type 21 has an invalid length. [ 316.693170][ T5704] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 316.733018][ T824] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 316.822931][ T5704] usb 1-1: device descriptor read/64, error -71 [ 316.865975][ T5613] Bluetooth: hci1: unexpected event 0x3d length: 10 < 14 [ 316.866169][ T5613] Bluetooth: hci1: unexpected event 0x3d length: 10 < 14 [ 316.866346][ T5613] Bluetooth: hci1: unexpected event 0x3d length: 10 < 14 [ 316.866591][ T5613] Bluetooth: hci1: unexpected event 0x3d length: 10 < 14 [ 316.866769][ T5613] Bluetooth: hci1: unexpected event 0x3d length: 10 < 14 [ 316.866940][ T5613] Bluetooth: hci1: unexpected event 0x3d length: 10 < 14 [ 316.867110][ T5613] Bluetooth: hci1: unexpected event 0x3d length: 10 < 14 [ 316.907844][ T824] usb 3-1: Using ep0 maxpacket: 8 [ 316.936136][ T5704] usb usb1-port1: attempt power cycle [ 316.959387][ T824] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 316.959446][ T824] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 316.959474][ T824] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 316.959500][ T824] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 316.983365][ T5613] Bluetooth: hci1: unexpected event 0x3d length: 10 < 14 [ 316.984221][ T5613] Bluetooth: hci1: unexpected event 0x3d length: 10 < 14 [ 316.984914][ T5613] Bluetooth: hci1: unexpected event 0x3d length: 10 < 14 [ 316.985603][ T5613] Bluetooth: hci1: unexpected event 0x3d length: 10 < 14 [ 317.020267][ T824] usb 3-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 317.020341][ T824] usb 3-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 317.020397][ T824] usb 3-1: Product: syz [ 317.020413][ T824] usb 3-1: Manufacturer: syz [ 317.020429][ T824] usb 3-1: SerialNumber: syz [ 317.021801][ T5613] Bluetooth: hci1: unexpected event 0x3d length: 10 < 14 [ 317.039479][ T5613] Bluetooth: hci1: unexpected event 0x3d length: 10 < 14 [ 317.039677][ T5613] Bluetooth: hci1: unexpected event 0x3d length: 10 < 14 [ 317.039835][ T5613] Bluetooth: hci1: unexpected event 0x3d length: 10 < 14 [ 317.040003][ T5613] Bluetooth: hci1: unexpected event 0x3d length: 10 < 14 [ 317.040139][ T5613] Bluetooth: hci1: unexpected event 0x3d length: 10 < 14 [ 317.040473][ T5613] Bluetooth: hci1: unexpected event 0x3d length: 10 < 14 [ 317.040635][ T5613] Bluetooth: hci1: unexpected event 0x3d length: 10 < 14 [ 317.040800][ T5613] Bluetooth: hci1: unexpected event 0x3d length: 10 < 14 [ 317.040968][ T5613] Bluetooth: hci1: unexpected event 0x3d length: 10 < 14 [ 317.041166][ T5613] Bluetooth: hci1: unexpected event 0x3d length: 10 < 14 [ 317.041295][ T5613] Bluetooth: hci1: unexpected event 0x3d length: 10 < 14 [ 317.041436][ T5613] Bluetooth: hci1: unexpected event 0x3d length: 10 < 14 [ 317.041569][ T5613] Bluetooth: hci1: unexpected event 0x3d length: 10 < 14 [ 317.041711][ T5613] Bluetooth: hci1: unexpected event 0x3d length: 10 < 14 [ 317.041871][ T5613] Bluetooth: hci1: unexpected event 0x3d length: 10 < 14 [ 317.042034][ T5613] Bluetooth: hci1: unexpected event 0x3d length: 10 < 14 [ 317.042180][ T5613] Bluetooth: hci1: unexpected event 0x3d length: 10 < 14 [ 317.047927][ T5613] Bluetooth: hci1: unexpected event 0x3d length: 10 < 14 [ 317.048082][ T5613] Bluetooth: hci1: unexpected event 0x3d length: 10 < 14 [ 317.048231][ T5613] Bluetooth: hci1: unexpected event 0x3d length: 10 < 14 [ 317.048456][ T5613] Bluetooth: hci1: unexpected event 0x3d length: 10 < 14 [ 317.088311][ T9513] netlink: 'syz.1.1123': attribute type 1 has an invalid length. [ 317.172151][ T824] usb 3-1: config 0 descriptor?? [ 317.234530][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 317.234563][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 317.234583][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 317.234871][ T9] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -32 [ 317.305238][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.305359][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.469862][ T9546] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1135'. [ 317.484281][ T824] rc_core: IR keymap rc-imon-rsc not found [ 317.484343][ T824] Registered IR keymap rc-empty [ 317.504768][ T9546] netlink: 'syz.3.1135': attribute type 16 has an invalid length. [ 317.504784][ T9546] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.1135'. [ 317.511731][ T824] rc rc0: iMON Station as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 317.513063][ T5704] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 317.521209][ T824] input: iMON Station as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input20 [ 317.544056][ T5704] usb 1-1: device descriptor read/8, error -71 [ 317.570111][ T824] imon_raw 3-1:0.0: probe with driver imon_raw failed with error -90 [ 317.635073][ T824] usb 3-1: USB disconnect, device number 64 [ 317.782967][ T5704] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 317.803886][ T5704] usb 1-1: device descriptor read/8, error -71 [ 317.915112][ T5704] usb usb1-port1: unable to enumerate USB device [ 318.245591][ T9559] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1139'. [ 318.635819][ T9576] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 318.635840][ T9576] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 318.705723][ T9576] vhci_hcd vhci_hcd.0: Device attached [ 318.706399][ T9578] vhci_hcd: connection closed [ 318.723821][ T7906] vhci_hcd vhci_hcd.2: stop threads [ 318.724946][ T7906] vhci_hcd vhci_hcd.2: release socket [ 318.725062][ T7906] vhci_hcd vhci_hcd.2: disconnect device [ 318.914361][ T5696] usb 2-1: USB disconnect, device number 89 [ 318.969041][ T9581] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1147'. [ 319.059263][ T9583] tipc: Started in network mode [ 319.059288][ T9583] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 319.091684][ T9583] tipc: Enabled bearer , priority 10 [ 319.338250][ T9588] block nbd0: not configured, cannot reconfigure [ 319.338816][ T9589] block nbd0: not configured, cannot reconfigure [ 319.349451][ T5696] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 319.497453][ T5696] usb 2-1: device descriptor read/64, error -71 [ 319.733234][ T5696] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 319.792998][ T824] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 319.862983][ T32] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 319.863687][ T5696] usb 2-1: device descriptor read/64, error -71 [ 319.945142][ T824] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 319.945224][ T824] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 231, changing to 7 [ 319.947578][ T824] usb 1-1: New USB device found, idVendor=0582, idProduct=0065, bcdDevice= 0.40 [ 319.947607][ T824] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.947631][ T824] usb 1-1: Product: syz [ 319.947642][ T824] usb 1-1: Manufacturer: syz [ 319.947653][ T824] usb 1-1: SerialNumber: syz [ 320.009669][ T32] usb 3-1: device descriptor read/64, error -71 [ 320.012200][ T5696] usb usb2-port1: attempt power cycle [ 320.172989][ T5781] tipc: Node number set to 4269801488 [ 320.203690][ T824] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 320.204061][ T824] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 320.235601][ T824] usb 1-1: USB disconnect, device number 74 [ 320.253077][ T32] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 320.363033][ T5696] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 320.383204][ T32] usb 3-1: device descriptor read/64, error -71 [ 320.384832][ T5696] usb 2-1: device descriptor read/8, error -71 [ 320.494846][ T32] usb usb3-port1: attempt power cycle [ 320.623011][ T5696] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 320.643607][ T5696] usb 2-1: device descriptor read/8, error -71 [ 320.753794][ T5696] usb usb2-port1: unable to enumerate USB device [ 320.832984][ T32] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 320.862149][ T32] usb 3-1: device descriptor read/8, error -71 [ 321.053607][ T5696] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 321.093145][ T32] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 321.125159][ T32] usb 3-1: device descriptor read/8, error -71 [ 321.215259][ T5696] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 321.215297][ T5696] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 321.215324][ T5696] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 321.217822][ T5696] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 321.217851][ T5696] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.217872][ T5696] usb 1-1: Product: syz [ 321.217896][ T5696] usb 1-1: Manufacturer: syz [ 321.217910][ T5696] usb 1-1: SerialNumber: syz [ 321.239432][ T32] usb usb3-port1: unable to enumerate USB device [ 321.245436][ T5696] usb 1-1: config 0 descriptor?? [ 321.246678][ T9608] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 321.258420][ T5696] usb 1-1: ucan: probing device on interface #0 [ 321.258494][ T5696] usb 1-1: ucan: invalid endpoint configuration [ 321.258537][ T5696] usb 1-1: ucan: probe failed; try to update the device firmware [ 321.463632][ T9608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.464344][ T9608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.467617][ T9608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.468563][ T9608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.506094][ T5696] usb 1-1: USB disconnect, device number 75 [ 322.531719][ T5613] Bluetooth: hci1: unexpected event for opcode 0x2005 [ 323.163161][ T5704] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 323.344297][ T5704] usb 1-1: Using ep0 maxpacket: 32 [ 323.355081][ T5704] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 323.355110][ T5704] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 323.355134][ T5704] usb 1-1: config 0 interface 0 has no altsetting 0 [ 323.391246][ T5704] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 323.391280][ T5704] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.391302][ T5704] usb 1-1: Product: syz [ 323.391317][ T5704] usb 1-1: Manufacturer: syz [ 323.391333][ T5704] usb 1-1: SerialNumber: syz [ 323.438121][ T5704] usb 1-1: config 0 descriptor?? [ 323.643911][ T9662] netlink: get zone limit has 8 unknown bytes [ 323.657582][ T9662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 323.660183][ T9662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 323.688768][ T5704] gs_usb 1-1:0.0: Couldn't send data format (err=-71) [ 323.688810][ T5704] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -71 [ 323.724848][ T5704] usb 1-1: USB disconnect, device number 76 [ 324.101814][ T9704] netlink: 'syz.2.1186': attribute type 3 has an invalid length. [ 324.103484][ T7879] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.103505][ T7879] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.603008][ T5696] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 324.702948][ T5704] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 324.753439][ T5696] usb 3-1: Using ep0 maxpacket: 16 [ 324.758629][ T5696] usb 3-1: config index 0 descriptor too short (expected 51443, got 18) [ 324.765905][ T5696] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 324.766017][ T5696] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.766086][ T5696] usb 3-1: Product: syz [ 324.766128][ T5696] usb 3-1: Manufacturer: syz [ 324.766163][ T5696] usb 3-1: SerialNumber: syz [ 324.824623][ T5696] r8152-cfgselector 3-1: Unknown version 0x0000 [ 324.824651][ T5696] r8152-cfgselector 3-1: config 0 descriptor?? [ 324.882918][ T5704] usb 1-1: Using ep0 maxpacket: 16 [ 324.885284][ T5704] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 324.885309][ T5704] usb 1-1: config 0 has no interface number 0 [ 324.888450][ T5704] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 324.888480][ T5704] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.888501][ T5704] usb 1-1: Product: syz [ 324.888516][ T5704] usb 1-1: Manufacturer: syz [ 324.888532][ T5704] usb 1-1: SerialNumber: syz [ 324.966014][ T5704] usb 1-1: config 0 descriptor?? [ 324.985968][ T5704] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 325.318681][ T201] r8152-cfgselector 3-1: USB disconnect, device number 70 [ 325.597374][ T5704] gspca_spca1528: reg_w err -71 [ 325.623143][ T5704] spca1528 1-1:0.1: probe with driver spca1528 failed with error -71 [ 325.641016][ T5704] usb 1-1: USB disconnect, device number 77 [ 325.842955][ T201] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 325.996906][ T201] usb 2-1: unable to get BOS descriptor or descriptor too short [ 325.998255][ T201] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 325.998282][ T201] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 325.998334][ T201] usb 2-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 325.998379][ T201] usb 2-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 325.998409][ T201] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 325.998428][ T201] usb 2-1: config 1 interface 1 has no altsetting 0 [ 326.001802][ T201] usb 2-1: string descriptor 0 read error: -22 [ 326.001928][ T201] usb 2-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 326.001946][ T201] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.522387][ T201] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2) [ 326.522411][ T201] usb 2-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 326.522423][ T201] usb 2-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1 [ 327.019061][ T201] usb 2-1: 2:0: failed to get current value for ch 1 (-71) [ 327.067592][ T201] usb 2-1: USB disconnect, device number 94 [ 327.412933][ T9] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 327.453191][ T5781] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 327.582957][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 327.589060][ T9] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 327.589090][ T9] usb 1-1: config 0 has no interface number 0 [ 327.603046][ T5781] usb 3-1: Using ep0 maxpacket: 32 [ 327.620262][ T9] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 327.620293][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.620313][ T9] usb 1-1: Product: syz [ 327.620328][ T9] usb 1-1: Manufacturer: syz [ 327.620343][ T9] usb 1-1: SerialNumber: syz [ 327.658402][ T5781] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 327.658432][ T5781] usb 3-1: config 0 has no interface number 0 [ 327.658479][ T5781] usb 3-1: config 0 interface 184 has no altsetting 0 [ 327.688933][ T9] usb 1-1: config 0 descriptor?? [ 327.725017][ T5781] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 327.725051][ T5781] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.725072][ T5781] usb 3-1: Product: syz [ 327.725087][ T5781] usb 3-1: Manufacturer: syz [ 327.725102][ T5781] usb 3-1: SerialNumber: syz [ 327.789486][ T9] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 327.807280][ T5781] usb 3-1: config 0 descriptor?? [ 328.003050][ T9] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 328.048738][ T9] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 328.062132][ T5781] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 328.062200][ T5781] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 328.062222][ T5781] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 328.062718][ T5781] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -32 [ 328.163782][ T9] usb 3-1: USB disconnect, device number 71 [ 328.208629][ T9777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.236514][ T9777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.465941][ T9777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.466539][ T9777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.470031][ T9777] netlink: 1004 bytes leftover after parsing attributes in process `syz.0.1210'. [ 328.476135][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 328.479537][ T5781] usb 1-1: USB disconnect, device number 78 [ 328.517120][ T5781] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 328.561260][ T5781] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 328.577006][ T5781] quatech2 1-1:0.51: device disconnected [ 328.704338][ T9] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 328.857459][ T9] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 328.857491][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 328.857511][ T9] usb 3-1: config 0 has no interface number 0 [ 328.857572][ T9] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 328.857599][ T9] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 328.857623][ T9] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 328.859985][ T9] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 328.860015][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.860039][ T9] usb 3-1: Product: syz [ 328.860049][ T9] usb 3-1: Manufacturer: syz [ 328.860060][ T9] usb 3-1: SerialNumber: syz [ 328.934037][ T9] usb 3-1: config 0 descriptor?? [ 329.139020][ T9808] tmpfs: Bad value for 'mpol' [ 329.373668][ T9] usbtouchscreen 3-1:0.117: probe with driver usbtouchscreen failed with error -32 [ 329.727604][ T9799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.728212][ T9799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.186150][ T5704] hid_parser_main: 472 callbacks suppressed [ 330.186176][ T5704] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 330.280595][ T5704] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 330.380443][ T5613] Bluetooth: Wrong link type (-71) [ 330.392272][ T5613] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 331.093174][ T5781] usb 1-1: new full-speed USB device number 79 using dummy_hcd [ 331.221240][ T9853] can: request_module (can-proto-0) failed. [ 331.255847][ T5781] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 331.255889][ T5781] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 331.255917][ T5781] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 331.255934][ T5781] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.260102][ T5781] usb 1-1: config 0 descriptor?? [ 331.362295][ T32] usb 3-1: USB disconnect, device number 72 [ 331.434108][ T5696] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 331.497126][ T5781] usbhid 1-1:0.0: can't add hid device: -71 [ 331.497254][ T5781] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 331.511766][ T5781] usb 1-1: USB disconnect, device number 79 [ 331.584488][ T5696] usb 2-1: Using ep0 maxpacket: 32 [ 331.594755][ T5696] usb 2-1: unable to get BOS descriptor or descriptor too short [ 331.598728][ T5696] usb 2-1: config 14 has an invalid interface number: 228 but max is 0 [ 331.598748][ T5696] usb 2-1: config 14 has no interface number 0 [ 331.598781][ T5696] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 331.598802][ T5696] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 331.598822][ T5696] usb 2-1: config 14 interface 228 has no altsetting 0 [ 331.601368][ T5696] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 331.601394][ T5696] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.601414][ T5696] usb 2-1: Product: syz [ 331.601430][ T5696] usb 2-1: Manufacturer: syz [ 331.601448][ T5696] usb 2-1: SerialNumber: syz [ 331.925212][ T5696] legousbtower 2-1:14.228: interrupt endpoints not found [ 332.210952][ T5704] usb 2-1: USB disconnect, device number 95 [ 333.385776][ T9939] loop5: detected capacity change from 0 to 7 [ 333.418821][ T9939] Dev loop5: unable to read RDB block 7 [ 333.418863][ T9939] loop5: AHDI p1 [ 333.421563][ T9939] loop5: partition table partially beyond EOD, truncated [ 333.462485][ T5616] Flush: task=udevd[5616] dev=loop5 state=2 [ 333.533759][ T5616] Teardown: task=udevd[5616] dev=loop5 state=2 [ 333.555365][ T9942] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 333.772992][ T201] usb 2-1: new full-speed USB device number 96 using dummy_hcd [ 333.912957][ T201] usb 2-1: device descriptor read/64, error -71 [ 333.956954][ T9960] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1264'. [ 333.997951][ T9] usb 1-1: new full-speed USB device number 80 using dummy_hcd [ 334.136352][ T5613] Bluetooth: hci1: unexpected cc 0x0c12 length: 1 < 3 [ 334.136385][ T5613] Bluetooth: hci1: unexpected event for opcode 0x0c12 [ 334.166156][ T9] usb 1-1: config 8 has an invalid interface number: 223 but max is 0 [ 334.166186][ T9] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 334.166205][ T9] usb 1-1: config 8 has no interface number 0 [ 334.166264][ T9] usb 1-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 334.166287][ T9] usb 1-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 334.179299][ T9] usb 1-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 334.179375][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.179424][ T9] usb 1-1: Product: syz [ 334.179455][ T9] usb 1-1: Manufacturer: syz [ 334.179502][ T9] usb 1-1: SerialNumber: syz [ 334.183002][ T201] usb 2-1: new full-speed USB device number 97 using dummy_hcd [ 334.413064][ T201] usb 2-1: device descriptor read/64, error -71 [ 334.545925][ T201] usb usb2-port1: attempt power cycle [ 334.612432][ T9] usb 1-1: USB disconnect, device number 80 [ 334.672073][ T9972] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1269'. [ 334.918056][ T201] usb 2-1: new full-speed USB device number 98 using dummy_hcd [ 334.933887][ T201] usb 2-1: device descriptor read/8, error -71 [ 335.183602][ T201] usb 2-1: new full-speed USB device number 99 using dummy_hcd [ 335.210304][ T201] usb 2-1: device descriptor read/8, error -71 [ 335.324105][ T201] usb usb2-port1: unable to enumerate USB device [ 335.612963][ T201] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 335.765395][ T201] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 335.765454][ T201] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 335.765478][ T201] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.770721][ T201] usb 1-1: config 0 descriptor?? [ 335.801488][ T201] pwc: Askey VC010 type 2 USB webcam detected. [ 336.003818][ T9981] netlink: 'syz.0.1271': attribute type 39 has an invalid length. [ 336.012079][ T9981] macvlan1: entered promiscuous mode [ 336.017930][ T9981] macvlan1: entered allmulticast mode [ 336.017953][ T9981] veth1_vlan: entered allmulticast mode [ 336.680996][T10008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.681688][T10008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.718276][T10008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.719226][T10008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.743091][ T32] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 336.893515][ T32] usb 3-1: Using ep0 maxpacket: 16 [ 336.897249][ T32] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 336.918228][ T32] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 336.918273][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.918295][ T32] usb 3-1: Product: syz [ 336.918311][ T32] usb 3-1: Manufacturer: syz [ 336.918324][ T32] usb 3-1: SerialNumber: syz [ 336.969090][ T32] usb 3-1: config 0 descriptor?? [ 336.993208][ T32] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 336.993247][ T32] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 337.022949][ T9] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 337.264750][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 337.264864][ T9] usb 2-1: New USB device found, idVendor=5705, idProduct=1abe, bcdDevice= 0.00 [ 337.264890][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.296518][ T9] usb 2-1: config 0 descriptor?? [ 337.312389][T10006] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 337.441042][T10017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.441560][T10017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.460291][ T32] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 337.534515][ T32] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 337.534546][ T32] em28xx 3-1:0.0: board has no eeprom [ 337.602904][ T32] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 337.602959][ T32] em28xx 3-1:0.0: dvb set to bulk mode. [ 337.603419][ T5781] em28xx 3-1:0.0: Binding DVB extension [ 337.665914][ T32] usb 3-1: USB disconnect, device number 74 [ 337.705184][ T32] em28xx 3-1:0.0: Disconnecting em28xx [ 337.811512][ T9] hid-generic 0003:5705:1ABE.000A: unknown main item tag 0x0 [ 337.811550][ T9] hid-generic 0003:5705:1ABE.000A: unknown main item tag 0x0 [ 337.811576][ T9] hid-generic 0003:5705:1ABE.000A: unknown main item tag 0x0 [ 337.811604][ T9] hid-generic 0003:5705:1ABE.000A: unknown main item tag 0x0 [ 337.811685][ T9] hid-generic 0003:5705:1ABE.000A: unknown main item tag 0x0 [ 337.811709][ T9] hid-generic 0003:5705:1ABE.000A: unknown main item tag 0x0 [ 337.811732][ T9] hid-generic 0003:5705:1ABE.000A: unknown main item tag 0x0 [ 337.811758][ T9] hid-generic 0003:5705:1ABE.000A: unknown main item tag 0x0 [ 337.811909][ T9] hid-generic 0003:5705:1ABE.000A: unknown main item tag 0x0 [ 337.812005][ T9] hid-generic 0003:5705:1ABE.000A: unknown main item tag 0x0 [ 337.952673][T10020] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1285'. [ 337.964944][ T5781] em28xx 3-1:0.0: Registering input extension [ 337.965435][ T32] em28xx 3-1:0.0: Closing input extension [ 338.138052][ T9] hid-generic 0003:5705:1ABE.000A: hidraw0: USB HID v7f.fd Device [HID 5705:1abe] on usb-dummy_hcd.1-1/input0 [ 338.228378][ T9] usb 2-1: USB disconnect, device number 100 [ 338.459807][T10023] fido_id[10023]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 338.493601][T10031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.626407][T10031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.809478][ T32] em28xx 3-1:0.0: Freeing device [ 339.742436][T10069] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1301'. [ 339.742460][T10069] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1301'. [ 339.742473][T10069] netlink: 'syz.2.1301': attribute type 5 has an invalid length. [ 339.742484][T10069] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1301'. [ 340.053807][ T32] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 340.209896][ T32] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 340.209930][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.209952][ T32] usb 3-1: Product: syz [ 340.209967][ T32] usb 3-1: Manufacturer: syz [ 340.209983][ T32] usb 3-1: SerialNumber: syz [ 340.573015][ T5696] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 340.864056][ T201] pwc: send_video_command error -110 [ 340.864079][ T201] pwc: Failed to set video mode CIF@30 fps; return code = -110 [ 340.864202][ T201] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -110 [ 340.957259][T10085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1306'. [ 341.006142][ T201] usb 3-1: USB disconnect, device number 75 [ 341.136629][T10089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.137784][T10089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.458868][T10102] overlayfs: failed to resolve '/‘ ìà“€ö@ÑÓ½và“‹YΊÆ”õeª8™FV': -2 [ 341.814276][ T5696] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 341.846698][T10127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.847367][T10127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.880513][T10127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.881151][T10127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.906438][ T5696] ath9k_htc: Failed to initialize the device [ 341.951958][T10127] binder: 10126:10127 ioctl 4018620d 0 returned -22 [ 341.953754][ T201] usb 3-1: ath9k_htc: USB layer deinitialized [ 342.374168][T10160] zonefs: Unknown parameter '*#' [ 342.833017][ T5781] usb 2-1: new full-speed USB device number 101 using dummy_hcd [ 342.873034][ T5696] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 342.927784][T10179] syz.0.1335 (10179): /proc/10178/oom_adj is deprecated, please use /proc/10178/oom_score_adj instead. [ 342.990557][ T5781] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 342.990582][ T5781] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.990596][ T5781] usb 2-1: Product: syz [ 342.990607][ T5781] usb 2-1: Manufacturer: syz [ 342.990617][ T5781] usb 2-1: SerialNumber: syz [ 343.024820][ T5696] usb 3-1: Using ep0 maxpacket: 8 [ 343.032195][ T5696] usb 3-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 343.032227][ T5696] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.032250][ T5696] usb 3-1: Product: syz [ 343.032265][ T5696] usb 3-1: Manufacturer: syz [ 343.032280][ T5696] usb 3-1: SerialNumber: syz [ 343.082345][ T5781] usb 2-1: config 0 descriptor?? [ 343.103612][ T5781] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 343.312477][ T5696] mxuport 3-1:254.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 343.322421][ T5696] mxuport 3-1:254.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 343.322575][ T5696] mxuport 3-1:254.0: probe with driver mxuport failed with error -71 [ 343.361267][ T5696] usb 3-1: USB disconnect, device number 76 [ 343.792919][ T5696] usb 3-1: new full-speed USB device number 77 using dummy_hcd [ 343.948305][ T5696] usb 3-1: not running at top speed; connect to a high speed hub [ 343.949983][ T5696] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 239, changing to 4 [ 343.979020][ T5696] usb 3-1: New USB device found, idVendor=0499, idProduct=105c, bcdDevice= 0.40 [ 343.979124][ T5696] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.979145][ T5696] usb 3-1: Product: Ж [ 343.979160][ T5696] usb 3-1: Manufacturer:   [ 343.979174][ T5696] usb 3-1: SerialNumber: ï•¡é‚ᨅæ¤êƒ¥ã†œå»â··äŽŽé¯™à¥‚ä®è’ﴯ⟯뮙ꓰ즱ຉ蓿ꡥ賴ኩᯮ腩䈻ڷ浳鴱鋨໶ᜡ [ 344.255906][T10195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.257853][T10195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.384107][ T5696] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 344.387128][ T5696] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 344.414261][ T5696] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 344.420103][ T5696] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 344.468594][ T5696] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 344.575793][T10210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.576400][T10210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.642026][ T5696] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 344.658977][ T5696] usb 3-1: USB disconnect, device number 77 [ 344.719090][ T6220] udevd[6220]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 344.946412][ T5781] gspca_stk1135: reg_w 0x200 err -71 [ 344.947494][ T5781] gspca_stk1135: serial bus timeout: status=0x00 [ 344.947510][ T5781] gspca_stk1135: Sensor write failed [ 344.947548][ T5781] gspca_stk1135: serial bus timeout: status=0x00 [ 344.947559][ T5781] gspca_stk1135: Sensor write failed [ 344.947601][ T5781] gspca_stk1135: serial bus timeout: status=0x00 [ 344.947612][ T5781] gspca_stk1135: Sensor read failed [ 344.947650][ T5781] gspca_stk1135: serial bus timeout: status=0x00 [ 344.947660][ T5781] gspca_stk1135: Sensor read failed [ 344.947668][ T5781] gspca_stk1135: Detected sensor type unknown (0x0) [ 344.947711][ T5781] gspca_stk1135: serial bus timeout: status=0x00 [ 344.947721][ T5781] gspca_stk1135: Sensor read failed [ 344.947758][ T5781] gspca_stk1135: serial bus timeout: status=0x00 [ 344.947768][ T5781] gspca_stk1135: Sensor read failed [ 344.947801][ T5781] gspca_stk1135: serial bus timeout: status=0x00 [ 344.947811][ T5781] gspca_stk1135: Sensor write failed [ 344.947847][ T5781] gspca_stk1135: serial bus timeout: status=0x00 [ 344.947857][ T5781] gspca_stk1135: Sensor write failed [ 344.947953][ T5781] stk1135 2-1:0.0: probe with driver stk1135 failed with error -71 [ 345.129435][ T5781] usb 2-1: USB disconnect, device number 101 [ 345.291394][T10220] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1343'. [ 345.291415][T10220] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1343'. [ 345.291432][T10220] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1343'. [ 345.893370][ T201] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 345.912945][ T5704] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 346.045409][ T201] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 346.045438][ T201] usb 3-1: config 2 has 1 interface, different from the descriptor's value: 3 [ 346.048389][ T201] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=bd.95 [ 346.048421][ T201] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.048447][ T201] usb 3-1: Product: syz [ 346.048458][ T201] usb 3-1: Manufacturer: syz [ 346.048469][ T201] usb 3-1: SerialNumber: syz [ 346.084891][ T5704] usb 2-1: Using ep0 maxpacket: 8 [ 346.121247][ T5704] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 346.121279][ T5704] usb 2-1: config 0 has no interface number 0 [ 346.121326][ T5704] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 346.121344][ T5704] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 346.121362][ T5704] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 346.121381][ T5704] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 346.121412][ T5704] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 346.121429][ T5704] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.252965][ T5704] usb 2-1: config 0 descriptor?? [ 346.310794][ T5704] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 346.449479][T10232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.464491][T10232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.485705][ T201] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 346.515789][ T201] dvb_usb_af9015 3-1:2.0: probe with driver dvb_usb_af9015 failed with error -22 [ 346.519243][ T201] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 346.519345][ T201] dvb_usb_af9035 3-1:2.0: probe with driver dvb_usb_af9035 failed with error -22 [ 346.578340][ T5704] usb 2-1: USB disconnect, device number 102 [ 346.595822][ T201] usb 3-1: USB disconnect, device number 78 [ 346.640317][ T5704] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 346.658102][ T39] audit: type=1326 audit(1783315896.011:9): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=10237 comm="syz.0.1350" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8281b6de59 code=0x7ffc0000 [ 346.658162][ T39] audit: type=1326 audit(1783315896.011:10): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=10237 comm="syz.0.1350" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8281b6de59 code=0x7ffc0000 [ 346.743451][ T39] audit: type=1326 audit(1783315896.091:11): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=10237 comm="syz.0.1350" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8281b6de59 code=0x7ffc0000 [ 346.743850][ T39] audit: type=1326 audit(1783315896.101:12): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=10237 comm="syz.0.1350" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f8281b6de59 code=0x7ffc0000 [ 346.745662][ T39] audit: type=1326 audit(1783315896.101:13): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=10237 comm="syz.0.1350" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8281b6de59 code=0x7ffc0000 [ 346.745996][ T39] audit: type=1326 audit(1783315896.101:14): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=10237 comm="syz.0.1350" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8281b6de59 code=0x7ffc0000 [ 346.747122][ T39] audit: type=1326 audit(1783315896.101:15): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=10237 comm="syz.0.1350" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8281b6de59 code=0x7ffc0000 [ 346.747173][ T39] audit: type=1326 audit(1783315896.101:16): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=10237 comm="syz.0.1350" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f8281b6de59 code=0x7ffc0000 [ 346.747565][ T39] audit: type=1326 audit(1783315896.101:17): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=10237 comm="syz.0.1350" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8281b6de59 code=0x7ffc0000 [ 346.747927][ T39] audit: type=1326 audit(1783315896.101:18): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=10237 comm="syz.0.1350" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8281b6de59 code=0x7ffc0000 [ 347.062665][T10244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.068511][T10244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.087823][T10244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.088576][T10244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.283075][ T5704] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 347.432866][ T5704] usb 3-1: Using ep0 maxpacket: 8 [ 347.435211][ T5704] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 347.435248][ T5704] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 347.435267][ T5704] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 347.435285][ T5704] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 347.435315][ T5704] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 347.435333][ T5704] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.673251][ T5704] usb 3-1: usb_control_msg returned -32 [ 347.673301][ T5704] usbtmc 3-1:16.0: can't read capabilities [ 348.102416][T10265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.113313][T10265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.189702][ T5781] usb 3-1: USB disconnect, device number 79 [ 348.483032][ T5696] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 348.638485][ T5696] usb 2-1: unable to get BOS descriptor or descriptor too short [ 348.639735][ T5696] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 348.639762][ T5696] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 348.642325][ T5696] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 348.642352][ T5696] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.642379][ T5696] usb 2-1: Product: syz [ 348.642389][ T5696] usb 2-1: Manufacturer: syz [ 348.642400][ T5696] usb 2-1: SerialNumber: syz [ 348.735512][T10290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.736148][T10290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.964114][ T5781] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 349.113291][ T5781] usb 3-1: Using ep0 maxpacket: 16 [ 349.119395][ T5781] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 349.119544][ T5781] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.119567][ T5781] usb 3-1: Product: syz [ 349.119583][ T5781] usb 3-1: Manufacturer: syz [ 349.119663][ T5781] usb 3-1: SerialNumber: syz [ 349.219650][ T5781] usb 3-1: config 0 descriptor?? [ 349.258936][ T5781] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 349.446349][ T5781] ssu100 3-1:0.0: probe with driver ssu100 failed with error -71 [ 349.470081][ T5781] usb 3-1: USB disconnect, device number 80 [ 350.488803][T10318] IPVS: set_ctl: invalid protocol: 47 255.255.255.255:20003 [ 350.514334][T10318] cgroup: noprefix used incorrectly [ 350.548180][ T5781] IPVS: starting estimator thread 0... [ 350.684123][T10321] IPVS: using max 7 ests per chain, 16800 per kthread [ 350.762046][T10326] openvswitch: netlink: Geneve option length err (len 856, max 255). [ 351.110727][ T5696] usb 2-1: selecting invalid altsetting 1 [ 351.113231][ T5696] usb 2-1: unit 3 not found! [ 351.117029][ T5696] usb 2-1: cannot request logical cluster ID: 0 (err: -71) [ 351.117123][ T5696] usb 2-1: invalid MIXER UNIT descriptor 6 [ 351.256718][T10338] netlink: 'syz.1.1381': attribute type 64 has an invalid length. [ 351.256740][T10338] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1381'. [ 351.300661][ T5696] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 351.313737][ T5696] usb 2-1: USB disconnect, device number 103 [ 351.376774][ T5616] udevd[5616]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 351.753080][ T5696] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 351.938737][ T5696] usb 2-1: Using ep0 maxpacket: 32 [ 351.941143][ T5696] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 351.941175][ T5696] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.972374][ T5696] usb 2-1: config 0 descriptor?? [ 352.017571][ T5696] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 352.116599][T10365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.117137][T10365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.213230][T10370] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1394'. [ 352.218716][T10370] fuse: Bad value for 'fd' [ 352.824406][ T5696] gspca_vc032x: reg_w err -71 [ 352.824473][ T5696] gspca_vc032x: I2c Bus Busy Wait 00 [ 352.824486][ T5696] gspca_vc032x: I2c Bus Busy Wait 00 [ 352.824497][ T5696] gspca_vc032x: I2c Bus Busy Wait 00 [ 352.824507][ T5696] gspca_vc032x: I2c Bus Busy Wait 00 [ 352.824518][ T5696] gspca_vc032x: I2c Bus Busy Wait 00 [ 352.824528][ T5696] gspca_vc032x: I2c Bus Busy Wait 00 [ 352.824538][ T5696] gspca_vc032x: I2c Bus Busy Wait 00 [ 352.824548][ T5696] gspca_vc032x: I2c Bus Busy Wait 00 [ 352.824558][ T5696] gspca_vc032x: I2c Bus Busy Wait 00 [ 352.824568][ T5696] gspca_vc032x: I2c Bus Busy Wait 00 [ 352.824578][ T5696] gspca_vc032x: I2c Bus Busy Wait 00 [ 352.824588][ T5696] gspca_vc032x: I2c Bus Busy Wait 00 [ 352.824597][ T5696] gspca_vc032x: I2c Bus Busy Wait 00 [ 352.824606][ T5696] gspca_vc032x: I2c Bus Busy Wait 00 [ 352.824615][ T5696] gspca_vc032x: I2c Bus Busy Wait 00 [ 352.824624][ T5696] gspca_vc032x: I2c Bus Busy Wait 00 [ 352.824634][ T5696] gspca_vc032x: I2c Bus Busy Wait 00 [ 352.824643][ T5696] gspca_vc032x: I2c Bus Busy Wait 00 [ 352.824652][ T5696] gspca_vc032x: Unknown sensor... [ 352.824740][ T5696] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 352.965703][ T5696] usb 2-1: USB disconnect, device number 104 [ 353.031451][T10386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.048596][T10386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.215659][T10395] fuse: fd is not a fuse device [ 353.306362][ T5696] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 353.564818][T10406] netlink: 'syz.0.1403': attribute type 2 has an invalid length. [ 353.566948][T10406] netlink: 'syz.0.1403': attribute type 21 has an invalid length. [ 353.567057][T10406] netlink: 'syz.0.1403': attribute type 1 has an invalid length. [ 353.647390][T10408] netdevsim netdevsim2: Direct firmware load for  failed with error -2 [ 353.647421][T10408] netdevsim netdevsim2: Falling back to sysfs fallback for:  [ 353.680033][T10409] overlayfs: missing 'lowerdir' [ 353.711039][T10411] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1406'. [ 353.919064][T10421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.925651][T10421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.479394][ T5696] usb 2-1: new full-speed USB device number 106 using dummy_hcd [ 354.495743][T10439] netlink: 'syz.0.1413': attribute type 10 has an invalid length. [ 354.541188][T10439] team0: Device veth1_vlan failed to register rx_handler [ 354.607549][ T5696] usb 2-1: device descriptor read/64, error -71 [ 354.714289][ T5696] usb usb2-port1: attempt power cycle [ 355.075368][ T5696] usb 2-1: new full-speed USB device number 107 using dummy_hcd [ 355.100634][ T5696] usb 2-1: device descriptor read/8, error -71 [ 355.343445][ T5696] usb 2-1: new full-speed USB device number 108 using dummy_hcd [ 355.363861][ T5696] usb 2-1: device descriptor read/8, error -71 [ 355.474617][ T5696] usb usb2-port1: unable to enumerate USB device [ 355.526378][ T5689] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 355.681864][ T5689] usb 3-1: Using ep0 maxpacket: 16 [ 355.692383][ T5689] usb 3-1: unable to get BOS descriptor or descriptor too short [ 355.718611][ T5689] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 355.718640][ T5689] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 355.753338][ T5689] usb 3-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40 [ 355.753370][ T5689] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.753392][ T5689] usb 3-1: Product: syz [ 355.753408][ T5689] usb 3-1: Manufacturer: syz [ 355.753424][ T5689] usb 3-1: SerialNumber: syz [ 356.014361][ T5689] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 356.083432][ T5689] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 356.114225][T10480] openvswitch: netlink: IPv4 tunnel dst address is zero [ 356.157045][ T5689] usb 3-1: USB disconnect, device number 81 [ 356.207318][ T5616] udevd[5616]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 356.380896][T10486] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1431'. [ 356.477561][T10490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.477990][T10489] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1433'. [ 356.479576][T10490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.768380][T10497] netlink: 'syz.2.1436': attribute type 1 has an invalid length. [ 357.273370][ T5696] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 357.465332][ T5696] usb 2-1: unable to get BOS descriptor or descriptor too short [ 357.466640][ T5696] usb 2-1: config 3 has an invalid interface number: 92 but max is 0 [ 357.466667][ T5696] usb 2-1: config 3 has no interface number 0 [ 357.466721][ T5696] usb 2-1: config 3 interface 92 altsetting 1 endpoint 0x3 has invalid maxpacket 1072, setting to 1024 [ 357.466749][ T5696] usb 2-1: config 3 interface 92 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 357.466774][ T5696] usb 2-1: config 3 interface 92 altsetting 1 endpoint 0xE has invalid wMaxPacketSize 0 [ 357.466797][ T5696] usb 2-1: config 3 interface 92 has no altsetting 0 [ 357.469275][ T5696] usb 2-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=2e.d7 [ 357.469305][ T5696] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.469328][ T5696] usb 2-1: Product: syz [ 357.469343][ T5696] usb 2-1: Manufacturer: syz [ 357.469358][ T5696] usb 2-1: SerialNumber: syz [ 357.529547][T10507] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 357.801835][ C1] vcan0: j1939_tp_rxtimer: 0xffff888045086c00: rx timeout, send abort [ 357.802444][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888045086c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 357.843200][T10529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.844996][T10529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.853132][ T5696] usb 2-1: probing VID:PID(0424:012C) [ 357.903609][ T5696] usb 2-1: vub300 testing BULK OUT EndPoint(0) 03 [ 357.903640][ T5696] usb 2-1: vub300 testing UNKNOWN EndPoint(1) 0E [ 357.903661][ T5696] usb 2-1: vub300 ignoring EndPoint(1) 0E [ 357.903679][ T5696] usb 2-1: Could not find two sets of bulk-in/out endpoint pairs [ 358.001106][ T5696] vub300 2-1:3.92: probe with driver vub300 failed with error -22 [ 358.021073][ T5696] usb 2-1: USB disconnect, device number 109 [ 358.248413][ T5327] ================================================================== [ 358.248504][ T5327] BUG: KASAN: slab-use-after-free in uea_upload_pre_firmware+0x8d/0x640 [ 358.248611][ T5327] Read of size 8 at addr ffff8880389a30b8 by task kworker/0:3/5327 [ 358.248629][ T5327] [ 358.248677][ T5327] CPU: 0 UID: 0 PID: 5327 Comm: kworker/0:3 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 358.248712][ T5327] Tainted: [L]=SOFTLOCKUP [ 358.248719][ T5327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 358.248734][ T5327] Workqueue: events request_firmware_work_func [ 358.248763][ T5327] Call Trace: [ 358.248801][ T5327] [ 358.248843][ T5327] dump_stack_lvl+0xe8/0x150 [ 358.248916][ T5327] print_address_description+0x55/0x1e0 [ 358.248949][ T5327] ? uea_upload_pre_firmware+0x8d/0x640 [ 358.249015][ T5327] print_report+0x58/0x70 [ 358.249043][ T5327] kasan_report+0x117/0x150 [ 358.249075][ T5327] ? _request_firmware+0x1322/0x1780 [ 358.249097][ T5327] ? uea_upload_pre_firmware+0x8d/0x640 [ 358.249133][ T5327] uea_upload_pre_firmware+0x8d/0x640 [ 358.249167][ T5327] ? __pfx__request_firmware+0x10/0x10 [ 358.249191][ T5327] ? __pfx_uea_upload_pre_firmware+0x10/0x10 [ 358.249224][ T5327] ? lock_acquire+0x115/0x350 [ 358.249247][ T5327] ? __pfx_uea_upload_pre_firmware+0x10/0x10 [ 358.249284][ T5327] request_firmware_work_func+0xf7/0x2d0 [ 358.249309][ T5327] ? rcu_is_watching+0x15/0xb0 [ 358.249335][ T5327] ? process_one_work+0x7fd/0x1480 [ 358.249358][ T5327] process_one_work+0xaaf/0x1480 [ 358.249390][ T5327] ? __pfx_process_one_work+0x10/0x10 [ 358.249411][ T5327] ? do_raw_spin_lock+0x12b/0x2f0 [ 358.249444][ T5327] ? assign_work+0x3cf/0x5d0 [ 358.249467][ T5327] worker_thread+0xb05/0x10d0 [ 358.249494][ T5327] ? __kthread_parkme+0x71/0x1f0 [ 358.249525][ T5327] kthread+0x388/0x470 [ 358.249552][ T5327] ? __pfx_worker_thread+0x10/0x10 [ 358.249575][ T5327] ? __pfx_kthread+0x10/0x10 [ 358.249603][ T5327] ret_from_fork+0x514/0xb70 [ 358.249636][ T5327] ? __pfx_ret_from_fork+0x10/0x10 [ 358.249666][ T5327] ? __switch_to+0xc89/0x1420 [ 358.249692][ T5327] ? __pfx_kthread+0x10/0x10 [ 358.249723][ T5327] ret_from_fork_asm+0x1a/0x30 [ 358.249762][ T5327] [ 358.249811][ T5327] [ 358.249822][ T5327] Allocated by task 5689: [ 358.249858][ T5327] kasan_save_track+0x3e/0x80 [ 358.249887][ T5327] __kasan_kmalloc+0x93/0xb0 [ 358.249915][ T5327] __kmalloc_cache_noprof+0x3cd/0x670 [ 358.249943][ T5327] snd_ctl_led_register+0x330/0xda0 [ 358.249974][ T5327] snd_ctl_dev_register+0xdf/0x130 [ 358.250012][ T5327] snd_device_register_all+0xd3/0x1b0 [ 358.250033][ T5327] snd_card_register+0x1d3/0x720 [ 358.250054][ T5327] try_to_register_card+0x662/0x820 [ 358.250086][ T5327] usb_audio_probe+0x1cae/0x2290 [ 358.250117][ T5327] usb_probe_interface+0x653/0xc60 [ 358.250145][ T5327] really_probe+0x254/0xae0 [ 358.250174][ T5327] __driver_probe_device+0x1e8/0x360 [ 358.250202][ T5327] driver_probe_device+0x4f/0x240 [ 358.250230][ T5327] __device_attach_driver+0x270/0x410 [ 358.250258][ T5327] bus_for_each_drv+0x25b/0x2f0 [ 358.250277][ T5327] __device_attach+0x2c7/0x450 [ 358.250303][ T5327] device_initial_probe+0xa1/0xd0 [ 358.250327][ T5327] bus_probe_device+0x12d/0x220 [ 358.250347][ T5327] device_add+0x7d7/0xb80 [ 358.250369][ T5327] usb_set_configuration+0x1ad8/0x2180 [ 358.250393][ T5327] usb_generic_driver_probe+0x8d/0x150 [ 358.250419][ T5327] usb_probe_device+0x1c3/0x3b0 [ 358.250447][ T5327] really_probe+0x254/0xae0 [ 358.250474][ T5327] __driver_probe_device+0x1e8/0x360 [ 358.250500][ T5327] driver_probe_device+0x4f/0x240 [ 358.250529][ T5327] __device_attach_driver+0x270/0x410 [ 358.250557][ T5327] bus_for_each_drv+0x25b/0x2f0 [ 358.250575][ T5327] __device_attach+0x2c7/0x450 [ 358.250601][ T5327] device_initial_probe+0xa1/0xd0 [ 358.250628][ T5327] bus_probe_device+0x12d/0x220 [ 358.250647][ T5327] device_add+0x7d7/0xb80 [ 358.250669][ T5327] usb_new_device+0x98d/0x1610 [ 358.250688][ T5327] hub_event+0x28cf/0x4cf0 [ 358.250713][ T5327] process_one_work+0xaaf/0x1480 [ 358.250731][ T5327] worker_thread+0xb05/0x10d0 [ 358.250752][ T5327] kthread+0x388/0x470 [ 358.250777][ T5327] ret_from_fork+0x514/0xb70 [ 358.250804][ T5327] ret_from_fork_asm+0x1a/0x30 [ 358.250830][ T5327] [ 358.250835][ T5327] Freed by task 5689: [ 358.250845][ T5327] kasan_save_track+0x3e/0x80 [ 358.250870][ T5327] kasan_save_free_info+0x40/0x50 [ 358.250891][ T5327] __kasan_slab_free+0x5c/0x80 [ 358.250917][ T5327] kfree+0x1c5/0x6c0 [ 358.250938][ T5327] device_release+0xc4/0x1f0 [ 358.250967][ T5327] kobject_put+0x222/0x550 [ 358.250997][ T5327] snd_ctl_led_sysfs_remove+0x163/0x440 [ 358.251025][ T5327] snd_ctl_led_disconnect+0x23/0x100 [ 358.251054][ T5327] snd_ctl_dev_disconnect+0x13d/0x1b0 [ 358.251084][ T5327] snd_device_disconnect_all+0xd7/0x210 [ 358.251105][ T5327] snd_card_disconnect+0x328/0x5c0 [ 358.251128][ T5327] snd_card_free+0x129/0x1d0 [ 358.251150][ T5327] usb_audio_probe+0x1d3b/0x2290 [ 358.251182][ T5327] usb_probe_interface+0x653/0xc60 [ 358.251217][ T5327] really_probe+0x254/0xae0 [ 358.251244][ T5327] __driver_probe_device+0x1e8/0x360 [ 358.251271][ T5327] driver_probe_device+0x4f/0x240 [ 358.251299][ T5327] __device_attach_driver+0x270/0x410 [ 358.251328][ T5327] bus_for_each_drv+0x25b/0x2f0 [ 358.251348][ T5327] __device_attach+0x2c7/0x450 [ 358.251375][ T5327] device_initial_probe+0xa1/0xd0 [ 358.251402][ T5327] bus_probe_device+0x12d/0x220 [ 358.251422][ T5327] device_add+0x7d7/0xb80 [ 358.251445][ T5327] usb_set_configuration+0x1ad8/0x2180 [ 358.251471][ T5327] usb_generic_driver_probe+0x8d/0x150 [ 358.251496][ T5327] usb_probe_device+0x1c3/0x3b0 [ 358.251524][ T5327] really_probe+0x254/0xae0 [ 358.251553][ T5327] __driver_probe_device+0x1e8/0x360 [ 358.251580][ T5327] driver_probe_device+0x4f/0x240 [ 358.251607][ T5327] __device_attach_driver+0x270/0x410 [ 358.251636][ T5327] bus_for_each_drv+0x25b/0x2f0 [ 358.251655][ T5327] __device_attach+0x2c7/0x450 [ 358.251679][ T5327] device_initial_probe+0xa1/0xd0 [ 358.251707][ T5327] bus_probe_device+0x12d/0x220 [ 358.251728][ T5327] device_add+0x7d7/0xb80 [ 358.251750][ T5327] usb_new_device+0x98d/0x1610 [ 358.251771][ T5327] hub_event+0x28cf/0x4cf0 [ 358.251796][ T5327] process_one_work+0xaaf/0x1480 [ 358.251816][ T5327] worker_thread+0xb05/0x10d0 [ 358.251837][ T5327] kthread+0x388/0x470 [ 358.251864][ T5327] ret_from_fork+0x514/0xb70 [ 358.251891][ T5327] ret_from_fork_asm+0x1a/0x30 [ 358.251919][ T5327] [ 358.251924][ T5327] The buggy address belongs to the object at ffff8880389a3000 [ 358.251924][ T5327] which belongs to the cache kmalloc-2k of size 2048 [ 358.251958][ T5327] The buggy address is located 184 bytes inside of [ 358.251958][ T5327] freed 2048-byte region [ffff8880389a3000, ffff8880389a3800) [ 358.251994][ T5327] [ 358.252000][ T5327] The buggy address belongs to the physical page: [ 358.252022][ T5327] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x389a0 [ 358.252046][ T5327] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 358.252064][ T5327] flags: 0x80000000000040(head|node=0|zone=1) [ 358.252081][ T5327] page_type: f5(slab) [ 358.252102][ T5327] raw: 0080000000000040 ffff88813fe3a000 dead000000000100 dead000000000122 [ 358.252121][ T5327] raw: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000 [ 358.252143][ T5327] head: 0080000000000040 ffff88813fe3a000 dead000000000100 dead000000000122 [ 358.252162][ T5327] head: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000 [ 358.252182][ T5327] head: 0080000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 358.252201][ T5327] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 358.252212][ T5327] page dumped because: kasan: bad access detected [ 358.252228][ T5327] page_owner tracks the page as allocated [ 358.252237][ T5327] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5601, tgid 5601 (syz-executor), ts 101042598711 [ 358.252272][ T5327] post_alloc_hook+0x1f9/0x250 [ 358.252299][ T5327] get_page_from_freelist+0x264c/0x26c0 [ 358.252331][ T5327] __alloc_frozen_pages_noprof+0x1a6/0x390 [ 358.252362][ T5327] allocate_slab+0x79/0x5e0 [ 358.252382][ T5327] refill_objects+0x2d8/0x350 [ 358.252403][ T5327] __pcs_replace_empty_main+0x330/0x690 [ 358.252424][ T5327] __kmalloc_cache_noprof+0x467/0x670 [ 358.252451][ T5327] br_vlan_add+0x22d/0x1060 [ 358.252475][ T5327] br_vlan_bridge_event+0x19b/0x600 [ 358.252503][ T5327] br_device_event+0x18d/0xa20 [ 358.252523][ T5327] notifier_call_chain+0x1a5/0x3d0 [ 358.252547][ T5327] register_netdevice+0x18c0/0x1ed0 [ 358.252579][ T5327] br_dev_newlink+0x6a/0x160 [ 358.252603][ T5327] rtnl_newlink_create+0x310/0xb00 [ 358.252634][ T5327] rtnl_newlink+0x167f/0x1bd0 [ 358.252660][ T5327] rtnetlink_rcv_msg+0x802/0xc00 [ 358.252685][ T5327] page last free pid 5601 tgid 5601 ts 100948476170 stack trace: [ 358.252700][ T5327] __free_frozen_pages+0x10de/0x11c0 [ 358.252726][ T5327] __slab_free+0x252/0x2a0 [ 358.252752][ T5327] qlist_free_all+0x99/0x100 [ 358.252775][ T5327] kasan_quarantine_reduce+0x148/0x160 [ 358.252800][ T5327] __kasan_slab_alloc+0x22/0x80 [ 358.252826][ T5327] kmem_cache_alloc_node_noprof+0x3f4/0x660 [ 358.252852][ T5327] __alloc_skb+0x1d7/0x7a0 [ 358.252876][ T5327] netlink_ack+0x136/0xb30 [ 358.252902][ T5327] netlink_rcv_skb+0x2a4/0x4a0 [ 358.252930][ T5327] netlink_unicast+0x7f5/0x990 [ 358.252954][ T5327] netlink_sendmsg+0x813/0xb40 [ 358.252993][ T5327] sock_sendmsg_nosec+0x13a/0x180 [ 358.253015][ T5327] __sys_sendto+0x41e/0x5d0 [ 358.253040][ T5327] __x64_sys_sendto+0xde/0x100 [ 358.253066][ T5327] do_syscall_64+0x174/0x580 [ 358.253094][ T5327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.253115][ T5327] [ 358.253121][ T5327] Memory state around the buggy address: [ 358.253218][ T5327] ffff8880389a2f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 358.253234][ T5327] ffff8880389a3000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 358.253247][ T5327] >ffff8880389a3080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 358.253259][ T5327] ^ [ 358.253271][ T5327] ffff8880389a3100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 358.253285][ T5327] ffff8880389a3180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 358.253296][ T5327] ================================================================== [ 358.253585][ T11] Oops: general protection fault, probably for non-canonical address 0xed8c89240cad8d2d: 0000 [#1] SMP KASAN PTI [ 358.253712][ T11] KASAN: maybe wild-memory-access in range [0x6c646920656c6968-0x6c646920656c696f] [ 358.253744][ T11] CPU: 0 UID: 0 PID: 11 Comm: kworker/0:1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 358.253771][ T11] Tainted: [L]=SOFTLOCKUP [ 358.253778][ T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 358.253792][ T11] Workqueue: events request_firmware_work_func [ 358.253821][ T11] RIP: 0010:__dev_printk+0xf4/0x190 [ 358.253851][ T11] Code: 75 1c e8 1f dc 1e fc 49 c7 c7 80 f7 e4 8b eb 2c e8 11 dc 1e fc eb 0c e8 0a dc 1e fc eb 05 e8 03 dc 1e fc 4c 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 ff e8 1d c0 8a fc 4d 8b 3f 4d 8d 66 50 [ 358.253877][ T11] RSP: 0018:ffffc900001078c8 EFLAGS: 00010206 [ 358.253902][ T11] RAX: 0d8c8d240cad8d2d RBX: ffffc90000107960 RCX: ffff88801de91f00 [ 358.253919][ T11] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 358.253952][ T11] RBP: 0000000000000033 R08: ffffc90000107997 R09: 0000000000000000 [ 358.253967][ T11] R10: ffffc90000107980 R11: fffff52000020f33 R12: ffffc90000107940 [ 358.253991][ T11] R13: dffffc0000000000 R14: ffffffff8b6d33a0 R15: 6c646920656c6968 [ 358.254008][ T11] FS: 0000000000000000(0000) GS:ffff888125a00000(0000) knlGS:0000000000000000 [ 358.254027][ T11] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 358.254041][ T11] CR2: 00007f3b55b3b540 CR3: 000000003cdb4000 CR4: 00000000003526f0 [ 358.254062][ T11] Call Trace: [ 358.254070][ T11] [ 358.254081][ T11] _dev_err+0x11e/0x180 [ 358.254114][ T11] ? kfree+0x1c5/0x6c0 [ 358.254139][ T11] ? __pfx__dev_err+0x10/0x10 [ 358.254175][ T11] uea_upload_pre_firmware+0xd8/0x640 [ 358.254211][ T11] ? __pfx__request_firmware+0x10/0x10 [ 358.254232][ T11] ? __pfx_uea_upload_pre_firmware+0x10/0x10 [ 358.254264][ T11] ? lock_acquire+0x115/0x350 [ 358.254286][ T11] ? __pfx_uea_upload_pre_firmware+0x10/0x10 [ 358.254318][ T11] request_firmware_work_func+0xf7/0x2d0 [ 358.254341][ T11] ? rcu_is_watching+0x15/0xb0 [ 358.254365][ T11] ? process_one_work+0x7fd/0x1480 [ 358.254388][ T11] process_one_work+0xaaf/0x1480 [ 358.254418][ T11] ? __pfx_process_one_work+0x10/0x10 [ 358.254439][ T11] ? do_raw_spin_lock+0x12b/0x2f0 [ 358.254473][ T11] ? assign_work+0x3cf/0x5d0 [ 358.254497][ T11] worker_thread+0xb05/0x10d0 [ 358.254525][ T11] ? __kthread_parkme+0x71/0x1f0 [ 358.254555][ T11] kthread+0x388/0x470 [ 358.254585][ T11] ? __pfx_worker_thread+0x10/0x10 [ 358.254608][ T11] ? __pfx_kthread+0x10/0x10 [ 358.254636][ T11] ret_from_fork+0x514/0xb70 [ 358.254666][ T11] ? __pfx_ret_from_fork+0x10/0x10 [ 358.254695][ T11] ? __switch_to+0xc89/0x1420 [ 358.254720][ T11] ? __pfx_kthread+0x10/0x10 [ 358.254749][ T11] ret_from_fork_asm+0x1a/0x30 [ 358.254787][ T11] [ 358.254805][ T11] Modules linked in: [ 358.254825][ T11] ---[ end trace 0000000000000000 ]--- [ 358.254841][ T11] RIP: 0010:__dev_printk+0xf4/0x190 [ 358.254873][ T11] Code: 75 1c e8 1f dc 1e fc 49 c7 c7 80 f7 e4 8b eb 2c e8 11 dc 1e fc eb 0c e8 0a dc 1e fc eb 05 e8 03 dc 1e fc 4c 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 ff e8 1d c0 8a fc 4d 8b 3f 4d 8d 66 50 [ 358.254892][ T11] RSP: 0018:ffffc900001078c8 EFLAGS: 00010206 [ 358.254910][ T11] RAX: 0d8c8d240cad8d2d RBX: ffffc90000107960 RCX: ffff88801de91f00 [ 358.254928][ T11] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 358.254941][ T11] RBP: 0000000000000033 R08: ffffc90000107997 R09: 0000000000000000 [ 358.254956][ T11] R10: ffffc90000107980 R11: fffff52000020f33 R12: ffffc90000107940 [ 358.254973][ T11] R13: dffffc0000000000 R14: ffffffff8b6d33a0 R15: 6c646920656c6968 [ 358.254996][ T11] FS: 0000000000000000(0000) GS:ffff888125a00000(0000) knlGS:0000000000000000 [ 358.255068][ T5858] (NULL device *): [UEAGLE-ATM] firmware is not available [ 358.255101][ T5858] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#2] SMP KASAN PTI [ 358.255122][ T5858] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 358.255142][ T5858] CPU: 0 UID: 0 PID: 5858 Comm: kworker/0:6 Tainted: G D L syzkaller #0 PREEMPT_{RT,(full)} [ 358.255172][ T5858] Tainted: [D]=DIE, [L]=SOFTLOCKUP [ 358.255180][ T5858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 358.255193][ T5858] Workqueue: events request_firmware_work_func [ 358.255218][ T5858] RIP: 0010:do_raw_spin_lock+0x73/0x2f0 [ 358.255248][ T5858] Code: c7 44 24 30 40 69 a1 81 4c 8d 64 24 20 49 c1 ec 03 48 b8 f1 f1 f1 f1 f8 f3 f3 f3 49 89 04 14 4c 8d 77 04 4c 89 f0 48 c1 e8 03 <0f> b6 04 10 84 c0 0f 85 f3 01 00 00 41 8b 06 3d ad 4e ad de 0f 85 [ 358.255265][ T5858] RSP: 0018:ffffc90005af7900 EFLAGS: 00010003 [ 358.255282][ T5858] RAX: 0000000000000001 RBX: 0000000000000008 RCX: 0000000080000002 [ 358.255295][ T5858] RDX: dffffc0000000000 RSI: ffffffff8bcb9960 RDI: 0000000000000008 [ 358.255310][ T5858] RBP: ffffc90005af79b8 R08: 0000000000000001 R09: 0000000000000000 [ 358.255324][ T5858] R10: dffffc0000000000 R11: fffffbfff1fa0ebf R12: 1ffff92000b5ef24 [ 358.255341][ T5858] R13: dffffc0000000000 R14: 000000000000000c R15: 0000000000000000 [ 358.255355][ T5858] FS: 0000000000000000(0000) GS:ffff888125a00000(0000) knlGS:0000000000000000 [ 358.255378][ T5858] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 358.255393][ T5858] CR2: 00007f3b55b3b540 CR3: 000000003cdb4000 CR4: 00000000003526f0 [ 358.255411][ T5858] Call Trace: [ 358.255418][ T5858] [ 358.255425][ T5858] ? rcu_is_watching+0x15/0xb0 [ 358.255449][ T5858] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 358.255479][ T5858] ? __pfx__dev_err+0x10/0x10 [ 358.255508][ T5858] ? rcu_is_watching+0x15/0xb0 [ 358.255533][ T5858] _raw_spin_lock_irqsave+0x4c/0x60 [ 358.255563][ T5858] complete+0x28/0x1b0 [ 358.255589][ T5858] ? release_firmware+0x2e/0xb0 [ 358.255612][ T5858] uea_upload_pre_firmware+0x2ef/0x640 [ 358.255648][ T5858] ? __pfx__request_firmware+0x10/0x10 [ 358.255670][ T5858] ? __pfx_uea_upload_pre_firmware+0x10/0x10 [ 358.255702][ T5858] ? lock_acquire+0x115/0x350 [ 358.255724][ T5858] ? __pfx_uea_upload_pre_firmware+0x10/0x10 [ 358.255757][ T5858] request_firmware_work_func+0xf7/0x2d0 [ 358.255780][ T5858] ? rcu_is_watching+0x15/0xb0 [ 358.255805][ T5858] ? process_one_work+0x7fd/0x1480 [ 358.255827][ T5858] process_one_work+0xaaf/0x1480 [ 358.255859][ T5858] ? __pfx_process_one_work+0x10/0x10 [ 358.255879][ T5858] ? do_raw_spin_lock+0x12b/0x2f0 [ 358.255911][ T5858] ? assign_work+0x3cf/0x5d0 [ 358.255935][ T5858] worker_thread+0xb05/0x10d0 [ 358.255963][ T5858] ? __kthread_parkme+0x71/0x1f0 [ 358.256002][ T5858] kthread+0x388/0x470 [ 358.256030][ T5858] ? __pfx_worker_thread+0x10/0x10 [ 358.256053][ T5858] ? __pfx_kthread+0x10/0x10 [ 358.256083][ T5858] ret_from_fork+0x514/0xb70 [ 358.256114][ T5858] ? __pfx_ret_from_fork+0x10/0x10 [ 358.256144][ T5858] ? __switch_to+0xc89/0x1420 [ 358.256170][ T5858] ? __pfx_kthread+0x10/0x10 [ 358.256199][ T5858] ret_from_fork_asm+0x1a/0x30 [ 358.256237][ T5858] [ 358.256244][ T5858] Modules linked in: [ 358.256258][ T5858] ---[ end trace 0000000000000000 ]--- [ 358.256269][ T5858] RIP: 0010:__dev_printk+0xf4/0x190 [ 358.256299][ T5858] Code: 75 1c e8 1f dc 1e fc 49 c7 c7 80 f7 e4 8b eb 2c e8 11 dc 1e fc eb 0c e8 0a dc 1e fc eb 05 e8 03 dc 1e fc 4c 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 ff e8 1d c0 8a fc 4d 8b 3f 4d 8d 66 50 [ 358.256318][ T5858] RSP: 0018:ffffc900001078c8 EFLAGS: 00010206 [ 358.256336][ T5858] RAX: 0d8c8d240cad8d2d RBX: ffffc90000107960 RCX: ffff88801de91f00 [ 358.256353][ T5858] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 358.256367][ T5858] RBP: 0000000000000033 R08: ffffc90000107997 R09: 0000000000000000 [ 358.256381][ T5858] R10: ffffc90000107980 R11: fffff52000020f33 R12: ffffc90000107940 [ 358.256398][ T5858] R13: dffffc0000000000 R14: ffffffff8b6d33a0 R15: 6c646920656c6968 [ 358.256416][ T5858] FS: 0000000000000000(0000) GS:ffff888125a00000(0000) knlGS:0000000000000000 [ 358.256434][ T5858] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 358.256449][ T5858] CR2: 00007f3b55b3b540 CR3: 000000003cdb4000 CR4: 00000000003526f0 [ 358.256527][ T5858] Kernel panic - not syncing: Fatal exception [ 358.256704][ T5858] Kernel Offset: disabled